Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: ZGR Clear all filters
TI-2020-07204 CVE-2020-8976 · GHSA-6r4p-h752-6w2r

ZGR TPS200 Cross-Site Request Forgery (CSRF)

Priority MEDIUM 44

The integrated server of the ZGR TPS200 NG on its 2.00 firmware version and 1.01 hardware version, allows a remote attacker to perform actions with the permissions of a victim user.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00585 Published 2022-10-17 No fix listed CWE-352
TI-2020-07201 CVE-2020-8973 · GHSA-8hw4-gj79-m365

ZGR TPS200 NG Improper access control

Priority MEDIUM 43

ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, does not properly accept specially constructed requests.

CVSS 3.1CRITICAL 9.3 Adjacent network No auth No interaction EPSS 0.00478 Published 2022-10-17 No fix listed CWE-284
TI-2020-07202 CVE-2020-8974 · GHSA-hrxj-958h-7348

ZGR TPS200 NG Missing Reference to Active Allocated Resource

Priority MEDIUM 50

In ZGR TPS200 NG 2.00 firmware version and 1.01 hardware version, the firmware upload process does not perform any type of restriction.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00842 Published 2022-10-17 No fix listed CWE-434
TI-2020-07203 CVE-2020-8975 · GHSA-pfqr-rvph-8c25

ZGR TPS200 NG Information Exposure

Priority MEDIUM 41

ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, allows a remote attacker with access to the web application and knowledge of the routes (URIs) used by the application, to access sensitive informatio…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01281 Published 2022-10-17 No fix listed CWE-201