CVE-2021-45877

Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded credential exist in /etc/tomcat8/tomcat-user.xml, which allows attackers to gain authorized access and control the tomcat completely on port 8000 in the tomcat manger page.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-03-21

Last modified

2024-08-04

Weaknesses

CWE-798

Affected products

• Wallbox Glb Firmware (Garo)
• Wallbox Gtb Firmware (Garo)
• Wallbox Gtc Firmware (Garo)

References

• https://github.com/delikely/advisory/tree/main/GARO