CVE-2020-8976 — ZGR TPS200 Cross-Site Request Forgery (CSRF)
The integrated server of the ZGR TPS200 NG on its 2.00 firmware version and 1.01 hardware version, allows a remote attacker to perform actions with the permissions of a victim u…
Published: 2022-10-17 · CVSS: 9.6 · CVSS 3.1
The integrated server of the ZGR TPS200 NG on its 2.00 firmware version and 1.01 hardware version, allows a remote attacker to perform actions with the permissions of a victim user. For this to happen, the victim user has to have an active session and triggers the malicious request.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7