Back to Database
Status published
Critical
CVE-2020-8974
ZGR TPS200 NG Missing Reference to Active Allocated Resource
Vulnerability Description
In ZGR TPS200 NG 2.00 firmware version and 1.01 hardware version, the firmware upload process does not perform any type of restriction. This allows an attacker to modify it and re-upload it via web with malicious modifications, rendering the device unusable.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-8974
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Discovered by the Industrial Cybersecurity team of S21sec, special mention to Aar�n Flecha Men�ndez.
References
Affected Vendor
Affected Software
ZGR TPS200 NG
Vulnerable Versions:
2.00 firmware version 2.00, 1.01 hardware version 1.01
Timeline
Official Publish:
October 17th, 2022
Last Modified:
May 13th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H