CVE-2023-30399

Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack.

CVSS v3.1 NVD

8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.95% chance of exploitation in the next 30 days, 60th percentile

Published

2023-05-04

Updated

2025-01-29

Proof-of-concept exploits (1)

• Yof3ng/IoT/blob/master/Garo/CVE-2023-30399.md1★ · 2023-05-31

Security advisories

• http://garocharging.com/glb-wallbox
• https://www.garo.se

References

• CVE Record
• NVD entry