Lucene search

INCIBECVE-2020-8974

HistoryOct 17, 2022 - 10:15 p.m.

CVE-2020-8974

2022-10-1722:15:10

CWE-434

INCIBE

web.nvd.nist.gov

cve

zgr tps200

firmware

upload

security vulnerability

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

In ZGR TPS200 NG 2.00 firmware version and 1.01 hardware version, the firmware upload process does not perform any type of restriction. This allows an attacker to modify it and re-upload it via web with malicious modifications, rendering the device unusable.

Affected configurations

Nvd

Vulners

Node

zigorzgr_tps200_ngMatch1.01

AND

zigorzgr_tps200_ng_firmwareMatch2.00

VendorProductVersionCPE
zigorzgr_tps200_ng1.01cpe:2.3:h:zigor:zgr_tps200_ng:1.01:*:*:*:*:*:*:*
zigorzgr_tps200_ng_firmware2.00cpe:2.3:o:zigor:zgr_tps200_ng_firmware:2.00:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zigor	zgr_tps200_ng	1.01	cpe:2.3:h:zigor:zgr_tps200_ng:1.01:::::::*
zigor	zgr_tps200_ng_firmware	2.00	cpe:2.3:o:zigor:zgr_tps200_ng_firmware:2.00:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "ZGR TPS200 NG",
    "vendor": "ZGR",
    "versions": [
      {
        "status": "affected",
        "version": "2.00 firmware version 2.00"
      },
      {
        "status": "affected",
        "version": "1.01 hardware version 1.01"
      }
    ]
  }
]

References

www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-zgr-tps200-ng

Social References

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

Related for CVE-2020-8974