BaseFortify

Publication date: 2025-12-10

Last updated on: 2025-12-11

Assigner: VulnCheck

Description

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers. Attackers can issue unauthorized requests to the device management API by leveraging the session binding mechanism to perform critical operations on the transmitter.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-10

Last Modified

2025-12-11

Generated

2026-07-06

AI Q&A

2025-12-11

EPSS Evaluated

2026-07-05

NVD

CVE-2023-53776

Affected Vendors & Products

Vendor	Product	Version / Range
screen	sft_dab	1.9.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-384	Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.

Attack-Flow Graph

Impact Analysis

The vulnerability can allow attackers to perform unauthorized critical operations on the transmitter by bypassing authentication controls. This could lead to unauthorized access, manipulation, or disruption of the device's functions.

Executive Summary

This vulnerability is an authentication bypass in Screen SFT DAB 1.9.3 that exploits weak session management. Attackers can reuse IP-bound session identifiers to bypass authentication and send unauthorized requests to the device management API, allowing them to perform critical operations on the transmitter.

Hi! I’m here to help you understand CVE-2023-53776. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70