Description
The integrated server of the ZGR TPS200 NG on its 2.00 firmware version and 1.01 hardware version, allows a remote attacker to perform actions with the permissions of a victim user. For this to happen, the victim user has to have an active session and triggers the malicious request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ZGR | ZGR TPS200 NG | 2.00 firmware version 2.00, 1.01 hardware version 1.01 | — |