PT-2025-47024 · Cscreen · Screen Sft Dab 600/C

Gjoko Krstic · CVE-2023-7328 · Published 2025-11-14 · Updated 2025-12-26

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Screen SFT DAB 600/C firmware versions up to and including 1.9.3

Description The Screen SFT DAB 600/C firmware has an issue with access control on the user management API. Unauthenticated requests can retrieve structured user data, including account names and connection metadata such as client IP and timeout values. The affected API endpoint is the user management API. The retrieved data includes account names and client IP addresses.

Recommendations Update to a version later than 1.9.3.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2023-7328

Affected Products

Screen Sft Dab 600/C

References · 11

• 🔥 https://exploit-db.com/exploits/51460 · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2023-5776.php · Exploit
• 🔥 https://packetstormsecurity.com/files/172332 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-7328 · Security Note
• https://osv.dev/vulnerability/CVE-2023-7328 · Vendor Advisory
• https://t.me/CVEtracker/37385 · Telegram Post
• https://twitter.com/CVEnew/status/1989472535683932534 · Twitter Post
• https://t.me/cveNotify/146901 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1989519723982213465 · Twitter Post
• https://dbbroadcast.com/products/radio/sft-dab-series-compact-air · Note
• https://vulncheck.com/advisories/screen-sft-dab-600c-unauthenticated-information-disclosure · Note