9.1

CVE-2021-45878

Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by incorrect access control. Lack of access control on the web manger pages allows any user to view and modify information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Garo ≫ Wallbox Gtb Firmware Version <= 185
   Garo ≫ Wallbox Gtb Version-
Garo ≫ Wallbox Gtc Firmware Version <= 185
   Garo ≫ Wallbox Gtc Version-
Garo ≫ Wallbox Glb Firmware Version <= 185
   Garo ≫ Wallbox Glb Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.489
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.