Vulnerability Description
Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials. Attackers can exploit the userManager.cgx endpoint by sending a crafted JSON request with a new MD5-hashed password to directly modify the admin account.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dbbroadcast | Sft Dab 015\/C Firmware | 1.9.3 |
| Dbbroadcast | Sft Dab 015\/C | - |
| Dbbroadcast | Sft Dab 050\/C Firmware | 1.9.3 |
| Dbbroadcast | Sft Dab 050\/C | - |
| Dbbroadcast | Sft Dab 150\/C Firmware | 1.9.3 |
| Dbbroadcast | Sft Dab 150\/C | - |
| Dbbroadcast | Sft Dab 300\/C Firmware | 1.9.3 |
| Dbbroadcast | Sft Dab 300\/C | - |
| Dbbroadcast | Sft Dab 600\/C Firmware | 1.9.3 |
| Dbbroadcast | Sft Dab 600\/C | - |
Related Weaknesses (CWE)
References
- https://www.dbbroadcast.comProduct
- https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/Product
- https://www.exploit-db.com/exploits/51458ExploitThird Party Advisory
- https://www.screen.itProduct
- https://www.vulncheck.com/advisories/screen-sft-dab-authentication-bypass-via-adThird Party Advisory
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5774.phpThird Party AdvisoryExploit
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5774.phpThird Party AdvisoryExploit
FAQ
What is CVE-2023-53740?
CVE-2023-53740 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials. Attackers can exploit the userManager...
How severe is CVE-2023-53740?
CVE-2023-53740 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-53740?
Check the references section above for vendor advisories and patch information. Affected products include: Dbbroadcast Sft Dab 015\/C Firmware, Dbbroadcast Sft Dab 015\/C, Dbbroadcast Sft Dab 050\/C Firmware, Dbbroadcast Sft Dab 050\/C, Dbbroadcast Sft Dab 150\/C Firmware.