CVE-2023-53741

Published: Dec 10, 2025Modified: Jun 17, 2026

5.1

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: disclosure@vulncheck.com (Secondary)

Description

Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without proper authorization.

Affected (5)

Products: Dbbroadcast: Sft Dab 015/c Firmware, Sft Dab 050/c Firmware, Sft Dab 150/c Firmware, Sft Dab 300/c Firmware, Sft Dab 600/c Firmware

Dbbroadcast

5 products

Sft Dab 015/c Firmware

Sft Dab 050/c Firmware

Sft Dab 150/c Firmware

Sft Dab 300/c Firmware

Sft Dab 600/c Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dbbroadcast Sft Dab 015/c Firmware	Version 1.9.3

Running on/with	Platform Versions
Dbbroadcast Sft Dab 015/c	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dbbroadcast Sft Dab 050/c Firmware	Version 1.9.3

Running on/with	Platform Versions
Dbbroadcast Sft Dab 050/c	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dbbroadcast Sft Dab 150/c Firmware	Version 1.9.3

Running on/with	Platform Versions
Dbbroadcast Sft Dab 150/c	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dbbroadcast Sft Dab 300/c Firmware	Version 1.9.3

Running on/with	Platform Versions
Dbbroadcast Sft Dab 300/c	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dbbroadcast Sft Dab 600/c Firmware	Version 1.9.3

Running on/with	Platform Versions
Dbbroadcast Sft Dab 600/c	All versions

Related CWEs

CWE-384

Session Fixation

Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.