Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2020-8976

ZGR TPS200 Cross-Site Request Forgery (CSRF)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

The integrated server of the ZGR TPS200 NG on its 2.00 firmware version and 1.01 hardware version, allows a remote attacker to perform actions with the permissions of a victim user. For this to happen, the victim user has to have an active session and triggers the malicious request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZGR ZGR TPS200 NG

Default version status: unaffected

  • 2.00 firmware version 2.00affected
  • 1.01 hardware version 1.01affected

References