Description
Screen SFT DAB 600/C firmware 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without requiring the current credentials. Attackers can exploit the userManager.cgx API endpoint by sending a crafted POST request with a new MD5-hashed password to directly modify the admin account's authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| DB Elettronica Telecomunicazioni SpA | Screen SFT DAB 600/C | - | — |
References
- ExploitDB-51458 exploit
- DB Elettronica Telecomunicazioni SpA Homepage product
- SFT DAB Series Product Page product
- Zero Science Lab Disclosure (ZSL-2022-5774) third-party-advisory
- VulnCheck Advisory: Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Admin Password Change third-party-advisory