PT-2025-50526 · Unknown · Screen Sft Dab

Published 2025-12-10 · Updated 2026-01-02 · CVE-2023-53775

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Screen SFT DAB version 1.9.3

Description Screen SFT DAB 1.9.3 has a flaw in its authentication process, allowing unauthorized modification of user passwords. This is due to weak session management controls, specifically the reuse of IP-bound session identifiers. Attackers can exploit this to issue unauthorized requests to the userManager API and change user credentials without valid authentication. The vulnerability allows attackers to bypass authentication checks.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the userManager API to minimize the risk of exploitation.

Exploit

Fix

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2023-53775

Affected Products

Screen Sft Dab

References · 11

• 🔥 https://exploit-db.com/exploits/51456 · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2023-5772.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53775 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53775 · Vendor Advisory
• https://twitter.com/CVEnew/status/1999108920087093363 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1998938043131031881 · Twitter Post
• https://dbbroadcast.com · Note
• https://t.me/cveNotify/147495 · Telegram Post
• https://screen.it · Note
• https://vulncheck.com/advisories/screen-sft-dab-authentication-bypass-via-user-password-change · Note
• https://dbbroadcast.com/products/radio/sft-dab-series-compact-air · Note