PT-2025-50525 · Unknown · Screen Sft Dab

Published 2025-12-10 · Updated 2025-12-11 · CVE-2023-53741

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Screen SFT DAB version 1.9.3

Description Screen SFT DAB version 1.9.3 has a weak session management issue. This allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. An attacker can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without authorization. The vulnerable API allows session reuse.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2023-53741

Affected Products

Screen Sft Dab

References · 10

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2023-5773.php · Exploit
• 🔥 https://exploit-db.com/exploits/51457 · Exploit
• https://dbbroadcast.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53741 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53741 · Security Note
• https://t.me/CVEtracker/39409 · Telegram Post
• https://vulncheck.com/advisories/screen-sft-dab-authentication-bypass-via-ip-session-management · Note
• https://screen.it · Note
• https://twitter.com/CVEnew/status/1999108921278320878 · Twitter Post
• https://dbbroadcast.com/products/radio/sft-dab-series-compact-air · Note