VulnerabilityAnalyzed
CVE-2023-53740
Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials.
HIGH 8.6EPSS 0.88%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.88%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials. Attackers can exploit the userManager.cgx endpoint by sending a crafted JSON request with a new MD5-hashed password to directly modify the admin account.
- CVSS 4.0
- 8.6 HIGHCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.88% probability · 57th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-862
- Affected
- dbbroadcast/sft dab 015\/c firmware · dbbroadcast/sft dab 050\/c firmware · dbbroadcast/sft dab 150\/c firmware · dbbroadcast/sft dab 300\/c firmware · dbbroadcast/sft dab 600\/c firmware
- Source
- disclosure@vulncheck.com
References
- https://www.dbbroadcast.comProduct
- https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/Product
- https://www.exploit-db.com/exploits/51458Exploit, Third Party Advisory
- https://www.screen.itProduct
- https://www.vulncheck.com/advisories/screen-sft-dab-authentication-bypass-via-admin-password-changeThird Party Advisory
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5774.phpExploit, Third Party Advisory
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5774.phpExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.