Lucene search
+L

6 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/23 12:00 a.m.•9 views

CVE-2023-23545: Missing Authentication for Critical Function

Missing authentication for critical function exists in T&D Corporation and ESPEC MIC CORP. data logger products, which may allow a remote unauthenticated attacker to alter the product settings without authentication. Affected products and versions are as follows: T&D Corporation data logger...

5.3CVSS5.9AI score0.00835EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/23 12:00 a.m.•9 views

CVE-2023-27387: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to conduct an arbitrary operation by having a logged-in user view a malicious page. Affected products and versions are as follows: T&D Corporation data logger...

8.8CVSS5.9AI score0.00448EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/23 12:00 a.m.•8 views

CVE-2023-27388: Improper Authentication

Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to login to the product as a registered user. Affected products and versions are as follows: T&D Corporation data logger products TR-71W/72W all firmware...

9.8CVSS5.9AI score0.01252EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/05/23 12:00 a.m.•8 views

PT-2023-21089

Name of the Vulnerable Software and Affected Versions T&D Corporation data logger products versions all firmware versions ESPEC MIC CORP. data logger products versions all firmware versions Description Cross-site request forgery CSRF allows a remote unauthenticated attacker to conduct an arbitrar...

8.8CVSS0.00448EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/23 12:00 a.m.•6 views

CVE-2023-22654: Improper Neutralization of Input During Web Page Generation

Client-side enforcement of server-side security issue exists in T&D Corporation and ESPEC MIC CORP. data logger products, which may lead to an arbitrary script execution on a logged-in user's web browser. Affected products and versions are as follows: T&D Corporation data logger products TR-71W/7...

5.4CVSS5.8AI score0.00508EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/05/23 12:00 a.m.•42 views

CVE-2023-27387

Cross-site request forgery CSRF in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenticated attacker to conduct an arbitrary operation by having a logged-in user view a malicious page. Affected products and versions are as follows: T&D Corporation data logger...

9.4AI score0.00448EPSS
SaveExploits0References3
Rows per page
Query Builder