CVE-2023-33684

Medium

Description

Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19 2021) Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication by re-using the IP address assigned to the device by the NAT protocol.

SeverityMedium
CVSS5.7
Exploit probability—
ProductDbbroadcast Sft Dab 600\/c Bios
PublishedJun 6, 2023
First seenJun 6, 2023

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
dbbroadcast sft_dab_600\/c_bios7.1—
dbbroadcast sft_dab_600\/c_firmware1.9.3—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.