CVE-2023-27387 - CVE House
Back to Database
Status published Unknown CVE-2023-27387

Cross-site request forgery (CSRF) in T&D Corporation and ESPEC MIC...

Vulnerability Description

Cross-site request forgery (CSRF) in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to conduct an arbitrary operation by having a logged-in user view a malicious page. Affected products and versions are as follows: T&D Corporation data logger products (TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions), and ESPEC MIC CORP. data logger products (RT-12N/RS-12N all firmware versions, RT-22BN all firmware versions, and TEU-12N all firmware versions).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-27387

Credits & Attribution

No credits recorded in the NVD database.

References

More from T&D Corporation and ESPEC MIC CORP.

View All →
CVE-2023-27388
Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP....
Unknown 0
CVE-2023-23545
Missing authentication for critical function exists in T&D Corporation and...
Unknown 0
CVE-2023-22654
Client-side enforcement of server-side security issue exists in T&D Corporation...
Unknown 0

Affected Vendor

T&D Corporation and ESPEC MIC CORP.

View all reports →

Affected Software

T&D Corporation and ESPEC MIC CORP. data logger products
Vulnerable Versions:
T&D Corporation data logger products (TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions), ESPEC MIC CORP. data logger products (RT-12N/RS-12N all firmware versions, RT-22BN all firmware versions, and TEU-12N all firmware versions)

Timeline

Official Publish: May 23rd, 2023
Last Modified: January 17th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.