Screen SFT DAB 600/C <= 1.9.3 Unauthenticated Information Disclosure
Vulnerability Description
Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structured user data, including account names and connection metadata such as client IP and timeout values.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-7328
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Gjoko Krstic of Zero Science Lab
References
- https://www.exploit-db.com/exploits/51460
- https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5776.php
- https://packetstormsecurity.com/files/172332/
- https://www.vulncheck.com/advisories/screen-sft-dab-600c-unauthenticated-information-disclosure
More from DB Elettronica Telecomunicazioni SpA
View All →Affected Vendor
DB Elettronica Telecomunicazioni SpA
View all reports →