CVE-2023-53970 — Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Reset Board Config
Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP-bound session identifi…
Published: 2025-12-22 · CVSS: 8.7 · CVSS 4.0
Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP-bound session identifiers. Attackers can exploit the vulnerable deviceManagement API endpoint to reset device configurations by sending crafted POST requests with manipulated session parameters.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7