tandd records
5 published records for vendor tandd.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-287 Improper Authentication1
- CWE-306 Missing Authentication for Critical Function1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-27388No exploit | Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP.tandd · tr-71w firmware · CWE-287 | Critical9.8 | — | 1.2% | May 22, 2023 |
35Monitor | CVE-2023-27387No exploit | Cross-site request forgery (CSRF) in T&D Corporation and ESPEC MIC CORP.tandd · tr-71w firmware · CWE-352 | High8.8 | — | 0.4% | May 22, 2023 |
31Monitor | CVE-2022-29509No exploit | Directory traversal vulnerability in T&D Data Server (Japanese Edition) Ver.2.22 and earlier, T&D Data Server (English Edition) Ver.2.30 andtandd · t\&d server · CWE-22 | High7.5 | — | 3.5% | Jun 14, 2022 |
21Monitor | CVE-2023-23545No exploit | Missing authentication for critical function exists in T&D Corporation and ESPEC MIC CORP.tandd · tr-71w firmware · CWE-306 | Medium5.3 | — | 0.8% | May 22, 2023 |
21Monitor | CVE-2023-22654No exploit | Client-side enforcement of server-side security issue exists in T&D Corporation and ESPEC MIC CORP.tandd · tr-71w firmware · CWE-79 | Medium5.4 | — | 0.5% | May 22, 2023 |
- CVE-2023-2738839Monitor
Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP.
CriticalCVSS 9.8No exploitEPSS 1%tandd · tr-71w firmwareMay 22, 2023
- CVE-2023-2738735Monitor
Cross-site request forgery (CSRF) in T&D Corporation and ESPEC MIC CORP.
HighCVSS 8.8No exploitEPSS 0%tandd · tr-71w firmwareMay 22, 2023
- CVE-2022-2950931Monitor
Directory traversal vulnerability in T&D Data Server (Japanese Edition) Ver.2.22 and earlier, T&D Data Server (English Edition) Ver.2.30 and
HighCVSS 7.5No exploitEPSS 3%tandd · t\&d serverJun 14, 2022
- CVE-2023-2354521Monitor
Missing authentication for critical function exists in T&D Corporation and ESPEC MIC CORP.
MediumCVSS 5.3No exploitEPSS 0%tandd · tr-71w firmwareMay 22, 2023
- CVE-2023-2265421Monitor
Client-side enforcement of server-side security issue exists in T&D Corporation and ESPEC MIC CORP.
MediumCVSS 5.4No exploitEPSS 0%tandd · tr-71w firmwareMay 22, 2023