Priority HIGH 77
Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP-bound session identifiers.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00512 · Published 2025-12-22 · No fix listed CWE-306
Priority HIGH 81
Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00512 · Published 2025-12-22 · No fix listed CWE-306
Priority HIGH 81
Screen SFT DAB 600/C Firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00636 · Published 2025-12-22 · No fix listed CWE-306
Priority HIGH 81
Screen SFT DAB 600/C firmware 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without requiring the current credentials.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00512 · Published 2025-12-22 · No fix listed CWE-306
Priority HIGH 73
Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers.
CVSS 4.0HIGH 8.7· Adjacent network · No auth · No interaction · EPSS 0.0048 · Published 2025-12-10 · No fix listed CWE-384
Priority MEDIUM 64
Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls.
CVSS 4.0HIGH 7.1· Adjacent network · No auth · No interaction · EPSS 0.00398 · Published 2025-12-10 · No fix listed CWE-384
Priority MEDIUM 56
Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00727 · Published 2025-12-10 · No fix listed CWE-384
Priority HIGH 72
Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials.
CVSS 4.0HIGH 8.6· Adjacent network · No auth · User interaction · EPSS 0.00882 · Published 2025-12-10 · No fix listed CWE-862
Priority HIGH 70
Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structured user data, including account names and…
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00371 · Published 2025-11-14 · No fix listed CWE-306
Priority LOW 26
Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19 2021) Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication…
CVSS 3.1MEDIUM 5.7· Adjacent network · Low privileges · No interaction · EPSS 0.00343 · Published 2023-06-06 · No fix listed