High severity8.1NVD Advisory· Published May 4, 2023· Updated Jun 17, 2026

CVE-2023-30399

Description

Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GARO/Wallbox Glb Firmware
cpe:2.3:o:garo:wallbox_glb_firmware:*:*:*:*:*:*:*:*
Range: <=189
GARO/Wallbox Gtb Firmware
cpe:2.3:o:garo:wallbox_gtb_firmware:*:*:*:*:*:*:*:*
Range: <=189
GARO/Wallbox Gtc Firmware
cpe:2.3:o:garo:wallbox_gtc_firmware:*:*:*:*:*:*:*:*
Range: <=189
GARO/Wallbox GLB/GTB/GTCdescription
GARO/Wallbox GLB/GTB/GTCllm-fuzzy
Range: <v189

Patches

Vulnerability mechanics

References

github.com/Yof3ng/IoT/blob/master/Garo/CVE-2023-30399.mdnvdExploitThird Party Advisory
garocharging.com/glb-wallbox/nvdProduct
www.garo.senvdProduct

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000