CVE-2020-8973

8.1 highEPSS 0.5%

High (8.1) in zigor zgr tps200 ng firmware. EPSS 0.5% chance of exploitation in the next 30 days.

ZGR TPS200 NG in its 2.00 firmware version and 1.01 hardware version, does not properly accept specially constructed requests. This allows an attacker with access to the network where the affected asset is located, to operate and change several parameters without having to be registered as a user on the web that owns the device.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-11-01)
CWE: CWE-284
Published: 2022-10-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zigor:zgr_tps200_ng_firmware

References

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-zgr-tps200-ng
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-zgr-tps200-ng

Check your stack JSON