Read the docs

DB Electronica Telecomunicazioni S.p.A.

Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

DB Electronica Telecomunicazioni S.p.A. records in CISA KEV

No DB Electronica Telecomunicazioni S.p.A. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

10 records in Sft Dab 600/c Firmware · all components

Priority HIGH 81

Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00512 Published 2025-12-22 No fix listed CWE-306
Priority HIGH 81

Screen SFT DAB 600/C Firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00636 Published 2025-12-22 No fix listed CWE-306
Priority HIGH 73

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.0048 Published 2025-12-10 No fix listed CWE-384
Priority HIGH 72

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials.

CVSS 4.0HIGH 8.6 Adjacent network No auth User interaction EPSS 0.00882 Published 2025-12-10 No fix listed CWE-862
Priority HIGH 70

Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structured user data, including account names and…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00371 Published 2025-11-14 No fix listed CWE-306
Priority MEDIUM 64

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00398 Published 2025-12-10 No fix listed CWE-384
Priority MEDIUM 56

Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00727 Published 2025-12-10 No fix listed CWE-384
Priority LOW 26

Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19 2021) Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication…

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00343 Published 2023-06-06 No fix listed
Open these records in search →