Skip to content
OpenAdvisories

Vendor

ZGR

4 known vulnerabilities.

Products

ZGR TPS200 NG 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.6
    CVE-2020-8976

    ZGR TPS200 Cross-Site Request Forgery (CSRF)

    The integrated server of the ZGR TPS200 NG on its 2.00 firmware version and 1.01 hardware version, allows a remote attacker to perform actions with the permissions of a victim user. For this to happen, the victim user has to have an active session and trigger…

    ZGR ZGR TPS200 NG
  • Critical 9.3
    CVE-2020-8973

    ZGR TPS200 NG Improper access control

    ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, does not properly accept specially constructed requests. This allows an attacker with access to the network where the affected asset is located, to operate and change several parameters wit…

    ZGR ZGR TPS200 NG
  • Critical 10.0
    CVE-2020-8974

    ZGR TPS200 NG Missing Reference to Active Allocated Resource

    In ZGR TPS200 NG 2.00 firmware version and 1.01 hardware version, the firmware upload process does not perform any type of restriction. This allows an attacker to modify it and re-upload it via web with malicious modifications, rendering the device unusable.

    ZGR ZGR TPS200 NG