Vulnerabilities > Garo

DATE CVE VULNERABILITY TITLE RISK
2023-05-04 CVE-2023-30399 Incorrect Permission Assignment for Critical Resource vulnerability in Garo products
Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack.
network
high complexity
garo CWE-732
8.1
2022-03-21 CVE-2021-45876 Command Injection vulnerability in Garo products
Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by unauthenticated command injection.
network
low complexity
garo CWE-77
critical
9.8
2022-03-21 CVE-2021-45877 Use of Hard-coded Credentials vulnerability in Garo products
Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials.
network
low complexity
garo CWE-798
critical
9.8
2022-03-21 CVE-2021-45878 Missing Authentication for Critical Function vulnerability in Garo products
Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by incorrect access control.
network
low complexity
garo CWE-306
critical
9.1