ws-2 firmware vulnerabilities and fixes

Recent CVEs affecting ws-2 firmware, with upgrade or downgrade steps. 4 tracked.

Also searched as: ws 2 firmware, ws-2firmware.

ws-2 firmware has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-05-23. Highest priority: CVE-2023-27388 (score 57/100).

• CVE-2023-27388 CRITICAL 9.8 MITIGATE MITIGATE Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP
• CVE-2023-27387 HIGH 8.8 MITIGATE MITIGATE Cross-site request forgery (CSRF) in T&D Corporation and ESPEC MIC CORP
• CVE-2023-23545 MEDIUM 5.3 MITIGATE MITIGATE Missing authentication for critical function exists in T&D Corporation and ESPEC MIC CORP
• CVE-2023-22654 MEDIUM 5.4 MITIGATE MITIGATE Client-side enforcement of server-side security issue exists in T&D Corporation and ESPEC MIC CORP

FAQ

How do I fix ws-2 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ws-2 firmware being exploited right now?

None of the tracked ws-2 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ws-2 firmware CVE should I patch first?

CVE-2023-27388 currently ranks highest (57/100): Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP.

RSS feed for ws-2 firmware · ← Back to latest CVEs