CVE-2023-53969criticalCWE-306

CVE-2023-53969: fallo crítico en DB Elettronica Telecomunicazioni SpA Screen…

Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Password Change

Publicada el

Seguir esta CVE+ Monitorear Screen SFT DAB 600/C

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.3epss 0.5%
Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to change user passwords without proper authentication.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
DB Elettronica Telecomunicazioni SpA · Screen SFT DAB 600/C
CVEs relacionadas — DB Elettronica Telecomunicazioni SpA Screen…

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-53968CRITICALScreen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Erase AccountEPSS 0.6%CVE-2023-53970HIGHScreen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Reset Board ConfigEPSS 0.5%CVE-2023-53967CRITICALScreen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Admin Password ChangeEPSS 0.5%CVE-2023-7328MEDIUMScreen SFT DAB 600/C <= 1.9.3 Unauthenticated Information DisclosureEPSS 0.4%