Dbbroadcast SFT DAB 600/C Firmware 1.9.3
Approved changes feed: RSS · Atom
cpe:2.3:o:dbbroadcast:sft_dab_600\/c_firmware:1.9.3:*:*:*:*:*:*:*
part: o version: 1.9.3 update: *
| Vendor | Dbbroadcast (d77f64c7-e391-5ae5-8077-754951eb7032) |
|---|---|
| Product | Sft Dab 600/C Firmware (ca760e06-c0ec-5a58-956b-3fe4b28fd299) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-53970 |
vulnerable | 2026-06-03 14:53:46.175399 |
Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Reset Board Config
HIGH (7.5)
Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP-bound session identifiers. Attackers can exploit the vulnerable deviceManagement API endpoint to reset device configurations by sending crafted POST requests with manipulated session parameters.
Published: 2025-12-22T21:35:32.122Z
Updated: 2025-12-22T22:04:57.904Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53969 |
vulnerable | 2026-06-03 14:53:46.175039 |
Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Password Change
HIGH (7.5)
Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to change user passwords without proper authentication.
Published: 2025-12-22T21:35:31.672Z
Updated: 2025-12-22T22:05:05.322Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53968 |
vulnerable | 2026-06-03 14:53:46.174670 |
Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Erase Account
CRITICAL (9.8)
Screen SFT DAB 600/C Firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to remove user accounts without proper authentication.
Published: 2025-12-22T21:35:31.256Z
Updated: 2025-12-22T22:05:10.626Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53967 |
vulnerable | 2026-06-03 14:53:46.173630 |
Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Admin Password Change
HIGH (7.5)
Screen SFT DAB 600/C firmware 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without requiring the current credentials. Attackers can exploit the userManager.cgx API endpoint by sending a crafted POST request with a new MD5-hashed password to directly modify the admin account's authentication.
Published: 2025-12-22T21:35:30.837Z
Updated: 2025-12-22T22:05:16.450Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53776 |
vulnerable | 2026-06-03 14:53:40.711389 |
Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness
Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers. Attackers can issue unauthorized requests to the device management API by leveraging the session binding mechanism to perform critical operations on the transmitter.
Published: 2025-12-10T21:12:22.042Z
Updated: 2026-04-07T14:06:54.767Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53775 |
vulnerable | 2026-06-03 14:53:40.711022 |
Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness
Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials without proper authentication.
Published: 2025-12-10T21:08:11.707Z
Updated: 2026-04-07T14:06:52.609Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53741 |
vulnerable | 2026-06-03 14:53:40.692681 |
Screen SFT DAB 1.9.3 Authentication Bypass via IP Session Management
Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without proper authorization.
Published: 2025-12-10T21:06:59.907Z
Updated: 2026-04-07T14:06:48.058Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53740 |
vulnerable | 2026-06-03 14:53:40.691523 |
Screen SFT DAB 1.9.3 Authentication Bypass via Admin Password Change
Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials. Attackers can exploit the userManager.cgx endpoint by sending a crafted JSON request with a new MD5-hashed password to directly modify the admin account.
Published: 2025-12-10T21:06:29.286Z
Updated: 2026-04-07T14:06:47.252Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33684 |
vulnerable | 2026-06-03 14:52:14.543906 |
Details available
Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19 2021) Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication by re-using the IP address assigned to the device by the NAT protocol.
Published: 2023-06-06T00:00:00.000Z
Updated: 2024-08-02T15:47:06.482Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.