CVE-2023-23545
Description
Missing authentication for critical function exists in T&D Corporation and ESPEC MIC CORP. data logger products, which may allow a remote unauthenticated attacker to alter the product settings without authentication. Affected products and versions are as follows: T&D Corporation data logger products (TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions), and ESPEC MIC CORP. data logger products (RT-12N/RS-12N all firmware versions, RT-22BN all firmware versions, and TEU-12N all firmware versions).
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tandd tr-71w_firmware | No range specified | — |
| tandd tr-72w_firmware | No range specified | — |
| tandd rtr-5w_firmware | No range specified | — |
| tandd wdr-7_firmware | No range specified | — |
| tandd wdr-3_firmware | No range specified | — |
| tandd ws-2_firmware | No range specified | — |
| especmic rt-12n_firmware | No range specified | — |
| especmic rs-12n_firmware | No range specified | — |
| especmic rt-22bn_firmware | No range specified | — |
| especmic teu-12n_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.