Lucene search

INCIBECVE-2020-8975

HistoryOct 17, 2022 - 10:15 p.m.

CVE-2020-8975

2022-10-1722:15:10

CWE-200

CWE-201

INCIBE

web.nvd.nist.gov

cve-2020-8975

zgr tps200 ng

firmware

hardware

remote access

sensitive information

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

57.5%

JSON

ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, allows a remote attacker with access to the web application and knowledge of the routes (URIs) used by the application, to access sensitive information about the system.

Affected configurations

Nvd

Vulners

Node

zigorzgr_tps200_ngMatch1.01

AND

zigorzgr_tps200_ng_firmwareMatch2.00

VendorProductVersionCPE
zigorzgr_tps200_ng1.01cpe:2.3:h:zigor:zgr_tps200_ng:1.01:*:*:*:*:*:*:*
zigorzgr_tps200_ng_firmware2.00cpe:2.3:o:zigor:zgr_tps200_ng_firmware:2.00:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zigor	zgr_tps200_ng	1.01	cpe:2.3:h:zigor:zgr_tps200_ng:1.01:::::::*
zigor	zgr_tps200_ng_firmware	2.00	cpe:2.3:o:zigor:zgr_tps200_ng_firmware:2.00:::::::*

CNA Affected

[
  {
    "vendor": "ZGR",
    "product": "ZGR TPS200 NG",
    "versions": [
      {
        "version": "2.00 firmware version 2.00",
        "status": "affected"
      },
      {
        "version": "1.01 hardware version 1.01",
        "status": "affected"
      }
    ]
  }
]

References

www.incibe-cert.es/en/early-warning/ics-advisories/multiple-vulnerabilities-zgr-tps200-ng

Social References

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.002

Percentile

57.5%

JSON

Related for CVE-2020-8975