BaseFortify

Publication date: 2025-10-29

Last updated on: 2025-10-30

Assigner: Asea Brown Boveri Ltd. (ABB)

Description

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-29

Last Modified

2025-10-30

Generated

2026-07-06

AI Q&A

2025-10-29

EPSS Evaluated

2026-07-05

NVD

CVE-2025-12142

EUVD

EUVD-2025-36638

Affected Vendors & Products

Vendor	Product	Version / Range
abb	terra_ac_wallbox	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a classic buffer overflow in the ABB Terra AC wallbox devices up to version 1.8.33. It occurs because the software copies input data into a buffer without checking if the input size exceeds the buffer capacity, which can lead to memory corruption.

Impact Analysis

The vulnerability can lead to high impact on integrity and availability of the affected device. An attacker with high privileges and network access could exploit this to cause denial of service or potentially execute arbitrary code, disrupting the normal operation of the Terra AC wallbox.

Hi! I’m here to help you understand CVE-2025-12142. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70