Description
Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers. Attackers can issue unauthorized requests to the device management API by leveraging the session binding mechanism to perform critical operations on the transmitter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| DB Elettronica Telecomunicazioni SpA | Screen SFT DAB Series - Compact Radio DAB Transmitter | 1.9.3 | — |
References
- ExploitDB-51459 exploit
- Product Homepage product
- Vendor Homepage product
- Product Homepage product
- Vendor Advisory URL vendor-advisory
- VulnCheck Advisory: Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness third-party-advisory