Vulnerability · Published Oct 17, 2022 · Assigned by INCIBE
CVE-2020-8975ZGR TPS200 NG Information Exposure
High 7.5
In plain English
A high-severity security flaw in ZGR TPS200 NG from ZGR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.3%top 29.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, allows a remote attacker with access to the web application and knowledge of the routes (URIs) used by the application, to access sensitive information about the system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ZGR | ZGR TPS200 NG | 2.00 firmware version 2.001.01 hardware version 1.01 |
Weakness: CWE-201 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N