CVE-2023-30399

2023-05-0400:00:00

mitre

www.cve.org

insecure permission

garo wallbox

redirect attack

man-in-the-middle

AI Score

Confidence

High

EPSS

0.002

Percentile

52.7%

JSON

Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack.

References

garocharging.com/glb-wallbox/

github.com/Yof3ng/IoT/blob/master/Garo/CVE-2023-30399.md

www.garo.se/