Description
Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials without proper authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| DB Elettronica Telecomunicazioni SpA | Screen SFT DAB Series - Compact Radio DAB Transmitter | 1.9.3 | — |
References
- ExploitDB-51456 exploit
- Screen Product Homepage product
- DB Broadcast Official Product Page product
- DB Broadcast Website product
- Zero Science Advisory URL vendor-advisory
- VulnCheck Advisory: Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness third-party-advisory