← Back

CVE-2020-8974

nvd nist
Published: Oct 17, 2022Modified: Nov 21, 2024

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

In ZGR TPS200 NG 2.00 firmware version and 1.01 hardware version, the firmware upload process does not perform any type of restriction. This allows an attacker to modify it and re-upload it via web with malicious modifications, rendering the device unusable.

Affected (1)

Zigor
1 product
Zgr Tps200 Ng Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Zgr Tps200 Ng Firmware
Version 2.00
Running on/withPlatform Versions
Zigor
Zgr Tps200 Ng
Version 1.01

Related CWEs

CWE-434
Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (2)

Source: cve-coordination@incibe.es
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.