What’s Vulnerable › Vulnerabilities

CVE-2023-27388

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-23 · updated 2026-06-17
• Weakness: CWE-287

Description

Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to login to the product as a registered user. Affected products and versions are as follows: T&D Corporation data logger products (TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions), and ESPEC MIC CORP. data logger products (RT-12N/RS-12N all firmware versions, RT-22BN all firmware versions, and TEU-12N all firmware versions).

Affected products

• Especmic Rs-12N Firmware: all versions
• Especmic Rt-12N Firmware: all versions
• Especmic Rt-22Bn Firmware: all versions
• Especmic Teu-12N Firmware: all versions
• Tandd Rtr-5W Firmware: all versions
• Tandd Tr-71W Firmware: all versions
• Tandd Tr-72W Firmware: all versions
• Tandd Wdr-3 Firmware: all versions
• Tandd Wdr-7 Firmware: all versions
• Tandd Ws-2 Firmware: all versions

References

• https://jvn.jp/en/jp/JVN14778242/
• https://www.monitoring.especmic.co.jp/post/VulnerabilityInRT-12N_RS-12N_RT-22BNandTEU-12N
• https://www.tandd.com/news/detail.html?id=780
• https://jvn.jp/en/jp/JVN14778242/
• https://www.monitoring.especmic.co.jp/post/VulnerabilityInRT-12N_RS-12N_RT-22BNandTEU-12N
• https://www.tandd.com/news/detail.html?id=780

Get alerted when CVE-2023-27388 or the next vulnerability affects your stack