CVE-2023-53775

7.1 highEPSS 0.4%

High (7.1) in dbbroadcast sft dab 600\/c firmware. EPSS 0.4% chance of exploitation in the next 30 days.

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials without proper authentication.

Severity

CVSS 4.0

7.1 high

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

6.5 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-384
Published: 2025-12-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dbbroadcast:sft_dab_600\/c_firmware

References

https://www.dbbroadcast.com
https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/
https://www.exploit-db.com/exploits/51456
https://www.screen.it
https://www.vulncheck.com/advisories/screen-sft-dab-authentication-bypass-via-user-password-change

Check your stack JSON