Read the docs

ZGR

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ZGR records in CISA KEV

No ZGR vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zgr Tps200 Ng Firmware 4 records MEDIUM

Records

4 records in Zgr Tps200 Ng Firmware · all components

TI-2020-07202 CVE-2020-8974 · GHSA-hrxj-958h-7348

ZGR TPS200 NG Missing Reference to Active Allocated Resource

Priority MEDIUM 50

In ZGR TPS200 NG 2.00 firmware version and 1.01 hardware version, the firmware upload process does not perform any type of restriction.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00842 Published 2022-10-17 No fix listed CWE-434
TI-2020-07204 CVE-2020-8976 · GHSA-6r4p-h752-6w2r

ZGR TPS200 Cross-Site Request Forgery (CSRF)

Priority MEDIUM 44

The integrated server of the ZGR TPS200 NG on its 2.00 firmware version and 1.01 hardware version, allows a remote attacker to perform actions with the permissions of a victim user.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00585 Published 2022-10-17 No fix listed CWE-352
TI-2020-07201 CVE-2020-8973 · GHSA-8hw4-gj79-m365

ZGR TPS200 NG Improper access control

Priority MEDIUM 43

ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, does not properly accept specially constructed requests.

CVSS 3.1CRITICAL 9.3 Adjacent network No auth No interaction EPSS 0.00478 Published 2022-10-17 No fix listed CWE-284
TI-2020-07203 CVE-2020-8975 · GHSA-pfqr-rvph-8c25

ZGR TPS200 NG Information Exposure

Priority MEDIUM 41

ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, allows a remote attacker with access to the web application and knowledge of the routes (URIs) used by the application, to access sensitive informatio…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01281 Published 2022-10-17 No fix listed CWE-201
Open these records in search →