PT-2025-50527 · Unknown · Screen Sft Dab

Published 2025-12-10 · Updated 2026-01-02 · CVE-2023-53776

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Screen SFT DAB version 1.9.3

Description Screen SFT DAB version 1.9.3 has an authentication issue. An attacker can bypass authentication by reusing IP-bound session identifiers due to weak session management. This allows unauthorized requests to the device management API, enabling critical operations on the transmitter. The issue involves exploiting the session binding mechanism.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Session Fixation

Weakness Enumeration

CWE-384

Related Identifiers

CVE-2023-53776

Affected Products

Screen Sft Dab

References · 11

• 🔥 https://exploit-db.com/exploits/51459 · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2023-5775.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53776 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53776 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1998935483112472946 · Twitter Post
• https://t.me/cveNotify/147496 · Telegram Post
• https://twitter.com/CVEnew/status/1999108918799388898 · Twitter Post
• https://dbbroadcast.com · Note
• https://screen.it · Note
• https://vulncheck.com/advisories/screen-sft-dab-authentication-bypass-via-session-management-weakness · Note
• https://dbbroadcast.com/products/radio/sft-dab-series-compact-air · Note