CVE Vulnerabilities

CVE-2020-8973

Published: Oct 17, 2022 | Modified: Nov 20, 2023
CVSS 3.x
8.1
HIGH
Source:
NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, does not properly accept specially constructed requests. This allows an attacker with access to the network where the affected asset is located, to operate and change several parameters without having to be registered as a user on the web that owns the device.

Affected Software

Name Vendor Start Version End Version
Zgr_tps200_ng_firmware Zigor 2.00 (including) 2.00 (including)

References