Dbbroadcast SFT DAB 600/C Firmware 1.9.3
Approved changes feed: RSS · Atom
cpe:2.3:o:dbbroadcast:sft_dab_600\/c_firmware:1.9.3:*:*:*:*:*:*:*
part: o version: 1.9.3 update: *
| Vendor | Dbbroadcast (d77f64c7-e391-5ae5-8077-754951eb7032) |
|---|---|
| Product | Sft Dab 600/C Firmware (ca760e06-c0ec-5a58-956b-3fe4b28fd299) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-53970 |
vulnerable | 2026-06-08 06:19:40.222110 | db.gcve.eu returned HTTP 503. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53969 |
vulnerable | 2026-06-08 06:19:40.221538 |
Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Password Change
HIGH (7.5)
Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to change user passwords without proper authentication.
Published: 2025-12-22T21:35:31.672Z
Updated: 2025-12-22T22:05:05.322Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53968 |
vulnerable | 2026-06-08 06:19:40.220914 | db.gcve.eu returned HTTP 503. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53967 |
vulnerable | 2026-06-08 06:19:40.219256 | db.gcve.eu returned HTTP 503. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53776 |
vulnerable | 2026-06-08 06:17:56.943250 |
Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness
Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers. Attackers can issue unauthorized requests to the device management API by leveraging the session binding mechanism to perform critical operations on the transmitter.
Published: 2025-12-10T21:12:22.042Z
Updated: 2026-04-07T14:06:54.767Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53775 |
vulnerable | 2026-06-08 06:17:56.942742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53741 |
vulnerable | 2026-06-08 06:17:56.915962 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53740 |
vulnerable | 2026-06-08 06:17:56.914274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33684 |
vulnerable | 2026-06-08 06:06:23.366207 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.