PT-2022-9068 · Unknown · Zgr Tps200 Ng

The Industrial · Published 2022-10-17 · Updated 2022-10-20 · CVE-2020-8975

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZGR TPS200 NG version 2.00 firmware and 1.01 hardware

Description The issue allows a remote attacker with access to the web application and knowledge of the routes (URIs) used by the application, to access sensitive information about the system.

Recommendations For ZGR TPS200 NG version 2.00 firmware and 1.01 hardware, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-201

CWE-200

Related Identifiers

CVE-2020-8975

Affected Products

Zgr Tps200 Ng

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-8975 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8975 · Vendor Advisory
• https://t.me/cibsecurity/51654 · Telegram Post
• https://incibe-cert.es/en/early-warning/ics-advisories/multiple-vulnerabilities-zgr-tps200-ng · Note