VYPR
← All advisories
Unrated severityNVD Advisory· Published May 23, 2023· Updated Jan 17, 2025

CVE-2023-27387

CVE-2023-27387

Description

Cross-site request forgery (CSRF) in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to conduct an arbitrary operation by having a logged-in user view a malicious page. Affected products and versions are as follows: T&D Corporation data logger products (TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions), and ESPEC MIC CORP. data logger products (RT-12N/RS-12N all firmware versions, RT-22BN all firmware versions, and TEU-12N all firmware versions).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • T&D Corporation/TR-71W/72Wllm-create
  • ESPEC MIC CORP./RT-12N/RS-12Nllm-create
  • T&D Corporation and ESPEC MIC CORP./T&D Corporation and ESPEC MIC CORP. data logger productsv5
    Range: T&D Corporation data logger products (TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions), ESPEC MIC CORP. data logger products (RT-12N/RS-12N all firmware versions, RT-22BN all firmware versions, and TEU-12N all firmware versions)

Patches

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

3

News mentions

0

No linked articles in our index yet.