CVE-2021-45877

2022-03-2110:38:37

mitre

www.cve.org

garo wallbox

hard coded credentials

tomcat manager

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

58.3%

JSON

Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded credential exist in /etc/tomcat8/tomcat-user.xml, which allows attackers to gain authorized access and control the tomcat completely on port 8000 in the tomcat manger page.

References

github.com/delikely/advisory/tree/main/GARO