Critical severity9.8NVD Advisory· Published Mar 21, 2022· Updated Jun 17, 2026

CVE-2021-45876

Description

Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by unauthenticated command injection. The url parameter of the function module downloadAndUpdate is vulnerable to an command Injection. Unfiltered user input is used to generate code which then gets executed when downloading new firmware.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GARO/Wallbox Glb Firmware
cpe:2.3:o:garo:wallbox_glb_firmware:*:*:*:*:*:*:*:*
Range: <=185
GARO/Wallbox Gtb Firmware
cpe:2.3:o:garo:wallbox_gtb_firmware:*:*:*:*:*:*:*:*
Range: <=185
GARO/Wallbox Gtc Firmware
cpe:2.3:o:garo:wallbox_gtc_firmware:*:*:*:*:*:*:*:*
Range: <=185
GARO/Wallbox GLB/GTB/GTCdescription
GARO/Wallbox GLB/GTB/GTCllm-fuzzy

Patches

Vulnerability mechanics

References

github.com/delikely/advisory/tree/main/GAROnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000