VYPR
← All advisories
Unrated severityNVD Advisory· Published May 23, 2023· Updated Jan 31, 2025

CVE-2023-27388

CVE-2023-27388

Description

Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to login to the product as a registered user. Affected products and versions are as follows: T&D Corporation data logger products (TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions), and ESPEC MIC CORP. data logger products (RT-12N/RS-12N all firmware versions, RT-22BN all firmware versions, and TEU-12N all firmware versions).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • T&D Corporation/TR-71W/72W, RTR-5W, WDR-7, WDR-3, WS-2llm-create
  • ESPEC MIC CORP./RT-12N/RS-12N, RT-22BN, TEU-12Nllm-create
  • T&D Corporation and ESPEC MIC CORP./T&D Corporation and ESPEC MIC CORP. data logger productsv5
    Range: T&D Corporation data logger products (TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions), ESPEC MIC CORP. data logger products (RT-12N/RS-12N all firmware versions, RT-22BN all firmware versions, and TEU-12N all firmware versions)

Patches

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

3

News mentions

0

No linked articles in our index yet.