First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-12143

MediumCVSS 6.1/10Last modified Oct 8, 2026

Description

Stack-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
ABB	Terra AC wallbox	<= 1.8.33

References

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A8107&LanguageCode=en&DocumentPartId=&Action=Launch

Timeline

Published: Nov 28, 2025
Last modified: Oct 8, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-121476.0In Search Guard FLX versions 3.1.1 and earlier, Field-Level Security (FLS) rules are improperly enforced on object-valued fields. When an CVE-2025-121486.0In Search Guard versions 3.1.1 and earlier, Field Masking (FM) rules are improperly enforced on fields of type IP (IP Address). While the c CVE-2025-121496.0In Search Guard FLX versions 3.1.2 and earlier, while Document-Level Security (DLS) is correctly enforced elsewhere, when the search is trig CVE-2025-12157.8A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. T CVE-2025-121503.1A flaw was found in Keycloak’s WebAuthn registration component. This vulnerability allows an attacker to bypass the configured attestation p CVE-2025-121516.4The Simple Folio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'portfolio_name' parameter in all versions up to,CVE-2025-121538.8The Featured Image via URL plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation function in all CVE-2025-121548.8The Auto Thumbnailer plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadThumb() f CVE-2025-121557.1A Command Injection vulnerability, resulting from improper file path sanitization (Directory Traversal) in Looker allows an attacker with De CVE-2025-121564.3The Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin for WordPress is vulnerable to unauthorized modificat CVE-2025-121575.3The Simple User Capabilities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on th CVE-2025-121589.8The Simple User Capabilities plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the suc_submit_

CVE-2025-12143: Medium severity, CVSS 6.1 | Vulnix