CVE-2023-7328 — Screen SFT DAB 600/C <= 1.9.3 Unauthenticated Information Disclosure
Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve struct…
Published: 2025-11-14 · CVSS: 6.9 · CVSS 4.0
Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structured user data, including account names and connection metadata such as client IP and timeout values.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7