CVE:CVE-2021-45877
CNNVD:CNNVD-202203-1892
GARO Wallbox GLB/GTB/GTC是瑞典GARO公司的一种电动汽车充电器。
GARO Wallbox GLB/GTB/GTC 存在安全漏洞，该漏洞源于/etc/tomcat8/tomcat-user.xml 中存在一个硬编码的凭据。攻击者利用该漏洞可以获得授权访问并完全控制tomcat 管理器页面中端口8000 上的tomcat。
solution:Upgrade garo wallbox_gtb_firmware to a higher version than 185,and avoid the version (,185]; Upgrade garo wallbox_gtc_firmware to a higher version than 185,and avoid the version (,185]; Upgrade garo wallbox_glb_firmware to a higher version than 185,and avoid the version (,185]