Description
Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without proper authorization.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| DB Elettronica Telecomunicazioni SpA | Screen SFT DAB Series - Compact Radio DAB Transmitter | 1.9.3 | — |
References
- ExploitDB-51457 exploit
- Product Homepage product
- Official Product Homepage product
- Vendor Homepage vendor-advisory vdb-entry
- Vendor Security Advisory for ZSL-2023-5773 vendor-advisory vdb-entry
- VulnCheck Advisory: Screen SFT DAB 1.9.3 Authentication Bypass via IP Session Management third-party-advisory