CVE-2021-45877: Garo Wallbox Glb Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded credential exist in /etc/tomcat8/tomcat-user.xml, which allows attackers to gain authorized access and control the tomcat completely on port 8000 in the tomcat manger page.

Affected products

• Garo Wallbox Glb Firmware: up to and including 185
• Garo Wallbox Gtb Firmware: up to and including 185
• Garo Wallbox Gtc Firmware: up to and including 185

Published 2022-03-21. Last modified 2026-06-17.