CVE-2023-27388

Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to login to the product as a registered user. Affected products and versions are as follows: T&D Corporation data logger products (TR-71W/72W all firmware versions, RTR-5W all firmware versions, WDR-7 all firmware versions, WDR-3 all firmware versions, and WS-2 all firmware versions), and ESPEC MIC CORP. data logger products (RT-12N/RS-12N all firmware versions, RT-22BN all firmware versions, and TEU-12N all firmware versions).

• CWE-287
• CWE-863

• https://jvn.jp/en/jp/JVN14778242/Third Party Advisory
• https://www.monitoring.especmic.co.jp/post/VulnerabilityInRT-12N_RS-12N_RT-22BNandTEU-12NVendor Advisory
• https://www.tandd.com/news/detail.html?id=780Vendor Advisory
• https://jvn.jp/en/jp/JVN14778242/Third Party Advisory
• https://www.monitoring.especmic.co.jp/post/VulnerabilityInRT-12N_RS-12N_RT-22BNandTEU-12NVendor Advisory
• https://www.tandd.com/news/detail.html?id=780Vendor Advisory

Published

May 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-27382Incorrect default permissions in the Audio Service for some …7.8
• CVE-2023-27383Protection mechanism failure in some Intel(R) oneAPI HPC Too…6.8
• CVE-2023-27384Operation restriction bypass vulnerability in MultiReport of…4.3
• CVE-2023-27385Heap-based buffer overflow vulnerability exists in CX-Drive …7.8
• CVE-2023-27386Uncontrolled search path in some Intel(R) Pathfinder for RIS…7.3
• CVE-2023-27387Cross-site request forgery (CSRF) in T&D Corporation and ESP…8.8
• CVE-2023-27389Inadequate encryption strength vulnerability in CONPROSYS Io…7.2
• CVE-2023-2739A vulnerability classified as problematic was found in Gira …6.1
• CVE-2023-27390A heap-based buffer overflow vulnerability exists in the Seq…7.8
• CVE-2023-27391Improper access control in some Intel(R) oneAPI Toolkit and …6.7
• CVE-2023-27392Incorrect default permissions in the Intel(R) Support androi…4.4
• CVE-2023-27394Osprey Pump Controller version 1.01 is vulnerable an unauthe…9.8