CVE-2023-27388
Description
Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to login to the product as a registered user. Affected products and versions are as follows: T&D Corporation data logger products (TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions), and ESPEC MIC CORP. data logger products (RT-12N/RS-12N all firmware versions, RT-22BN all firmware versions, and TEU-12N all firmware versions).
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tandd tr-71w_firmware | No range specified | — |
| tandd tr-72w_firmware | No range specified | — |
| tandd rtr-5w_firmware | No range specified | — |
| tandd wdr-7_firmware | No range specified | — |
| tandd wdr-3_firmware | No range specified | — |
| tandd ws-2_firmware | No range specified | — |
| especmic rt-12n_firmware | No range specified | — |
| especmic rs-12n_firmware | No range specified | — |
| especmic rt-22bn_firmware | No range specified | — |
| especmic teu-12n_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.