CVE:CVE-2021-45876
CNNVD:CNNVD-202203-1896
GARO Wallbox GLB/GTB/GTC是瑞典GARO公司的一种电动汽车充电器。
GARO Wallbox GLB/GTB/GTC 存在安全漏洞，该漏洞源于功能模块downloadAndUpdate的url参数容易被命令注入。未经过滤的用户输入生成代码利用该漏洞然后在下载新固件时执行该代码。
solution:Upgrade garo wallbox_gtb_firmware to a higher version than 185,and avoid the version (,185]; Upgrade garo wallbox_gtc_firmware to a higher version than 185,and avoid the version (,185]; Upgrade garo wallbox_glb_firmware to a higher version than 185,and avoid the version (,185]