CVE-2023-30399: Garo Wallbox Glb Firmware

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack.

Affected products

• Garo Wallbox Glb Firmware: up to and including 189
• Garo Wallbox Gtb Firmware: up to and including 189
• Garo Wallbox Gtc Firmware: up to and including 189

Published 2023-05-04. Last modified 2026-06-17.