CVE-2023-53775

Medium

Description

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials without proper authentication.

SeverityMedium

CVSS6.5

Exploit probability—

ProductDbbroadcast Sft Dab 600\/c Firmware

PublishedDec 10, 2025

First seenDec 10, 2025

Weakness typeCWE-384CWE-384

How to fix

Vendor advisories

zeroscience.mk/en/vulnerabilities/ZSL-2023-5772.php

Affected products

Product	Affected versions	Fixed in
dbbroadcast sft_dab_600\/c_firmware	1.9.3	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.