Garo Wallbox Glb
4 CVEs affecting Garo Wallbox Glb. Latest disclosed: 2023-05-04. Critical: 3, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-45877 | Critical | 9.8 | 2022-03-21 | Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded credential exist in /etc/tomcat8/tomcat-user.xml, which allow… |
CVE-2021-45876 | Critical | 9.8 | 2022-03-21 | Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by unauthenticated command injection. The url parameter of the function module downloadAndUpdate is… |
CVE-2021-45878 | Critical | 9.1 | 2022-03-21 | Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by incorrect access control. Lack of access control on the web manger pages allows any user to view… |
CVE-2023-30399 | High | 8.1 | 2023-05-04 | Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man… |