PT-2025-52705 · Unknown · Screen Sft Dab 600/C

Published 2025-12-22 · Updated 2025-12-23 · CVE-2023-53968

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Screen SFT DAB 600/C version 1.9.3

Description Screen SFT DAB 600/C Firmware version 1.9.3 contains a session management issue that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to remove user accounts without proper authentication.

Recommendations Screen SFT DAB 600/C version 1.9.3: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2023-53968

Affected Products

Screen Sft Dab 600/C

References · 12

• 🔥 https://vulncheck.com/advisories/screen-sft-dab-c-firmware-authentication-bypass-erase-account · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2023-5773.php · Exploit
• 🔥 https://exploit-db.com/exploits/51457 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53968 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53968 · Vendor Advisory
• https://twitter.com/CVEnew/status/2003233949620011442 · Twitter Post
• https://dbbroadcast.com · Note
• https://twitter.com/CveFindCom/status/2003234032998309917 · Twitter Post
• https://t.me/CVEtracker/40436 · Telegram Post
• https://twitter.com/TheHackerWire/status/2003296015093498146 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2003298588370047037 · Twitter Post
• https://dbbroadcast.com/products/radio/sft-dab-series-compact-air · Note