Vulnerability Description
Missing authentication for critical function exists in T&D Corporation and ESPEC MIC CORP. data logger products, which may allow a remote unauthenticated attacker to alter the product settings without authentication. Affected products and versions are as follows: T&D Corporation data logger products (TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions), and ESPEC MIC CORP. data logger products (RT-12N/RS-12N all firmware versions, RT-22BN all firmware versions, and TEU-12N all firmware versions).
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tandd | Tr-71W Firmware | All versions |
| Tandd | Tr-71W | - |
| Tandd | Tr-72W Firmware | All versions |
| Tandd | Tr-72W | - |
| Tandd | Rtr-5W Firmware | All versions |
| Tandd | Rtr-5W | - |
| Tandd | Wdr-7 Firmware | All versions |
| Tandd | Wdr-7 | - |
| Tandd | Wdr-3 Firmware | All versions |
| Tandd | Wdr-3 | - |
| Tandd | Ws-2 Firmware | All versions |
| Tandd | Ws-2 | - |
| Especmic | Rt-12N Firmware | All versions |
| Especmic | Rt-12N | - |
| Especmic | Rs-12N Firmware | All versions |
| Especmic | Rs-12N | - |
| Especmic | Rt-22Bn Firmware | All versions |
| Especmic | Rt-22Bn | - |
| Especmic | Teu-12N Firmware | All versions |
| Especmic | Teu-12N | - |
Related Weaknesses (CWE)
References
- https://jvn.jp/en/jp/JVN14778242/Third Party Advisory
- https://www.monitoring.especmic.co.jp/post/VulnerabilityInRT-12N_RS-12N_RT-22BNaVendor Advisory
- https://www.tandd.com/news/detail.html?id=780Vendor Advisory
- https://jvn.jp/en/jp/JVN14778242/Third Party Advisory
- https://www.monitoring.especmic.co.jp/post/VulnerabilityInRT-12N_RS-12N_RT-22BNaVendor Advisory
- https://www.tandd.com/news/detail.html?id=780Vendor Advisory
FAQ
What is CVE-2023-23545?
CVE-2023-23545 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Missing authentication for critical function exists in T&D Corporation and ESPEC MIC CORP. data logger products, which may allow a remote unauthenticated attacker to alter the product settings without...
How severe is CVE-2023-23545?
CVE-2023-23545 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-23545?
Check the references section above for vendor advisories and patch information. Affected products include: Tandd Tr-71W Firmware, Tandd Tr-71W, Tandd Tr-72W Firmware, Tandd Tr-72W, Tandd Rtr-5W Firmware.