CVE-2023-33684

Published: Jun 6, 2023Modified: Jun 17, 2026

5.7

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.1 / Impact: 3.6

Source: NVD

Description

Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19 2021) Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication by re-using the IP address assigned to the device by the NAT protocol.

Affected (2)

Products: Dbbroadcast: Sft Dab 600/c Bios, Sft Dab 600/c Firmware

2 products

Sft Dab 600/c Bios

Sft Dab 600/c Firmware

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dbbroadcast Sft Dab 600/c Bios	Version 7.1
Dbbroadcast Sft Dab 600/c Firmware	Version 1.9.3

Running on/with	Platform Versions
Dbbroadcast Sft Dab 600/c	All versions

References (2)

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5771.php

Source: cve@mitre.org

Third Party Advisory

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5771.php

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.