CVE-2020-8973

ZGR TPS200 NG Improper access control

State: Published
Severity: 9.3 Critical
Published: Oct 17, 2022
Updated: May 13, 2025
Reserved: Feb 13, 2020

Description

ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, does not properly accept specially constructed requests. This allows an attacker with access to the network where the affected asset is located, to operate and change several parameters without having to be registered as a user on the web that owns the device.

Scores

CVSS	Score	Vector	Source
3.1	9.3 Critical	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N	INCIBE

Weaknesses

CWE-284 improper access control

Affected Products

Product	Versions
ZGR TPS200 NGZGR	2.00 firmware version 2.00Affected 1.01 hardware version 1.01Affected

References

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-zgr-tps200-ng

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.