critical9.8
CVE-2021-45877
Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials.
Impact
Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded credential exist in /etc/tomcat8/tomcat-user.xml, which allows attackers to gain authorized access and control the tomcat completely on port 8000 in the tomcat manger page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Garo | Wallbox Gtb Firmware | through 185 |
| Garo | Wallbox Gtc Firmware | through 185 |
| Garo | Wallbox Glb Firmware | through 185 |