High severity7.5NVD Advisory· Published Dec 22, 2025· Updated Jun 17, 2026
CVE-2023-53967
CVE-2023-53967
Description
Screen SFT DAB 600/C firmware 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without requiring the current credentials. Attackers can exploit the userManager.cgx API endpoint by sending a crafted POST request with a new MD5-hashed password to directly modify the admin account's authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: 1.9.3
- cpe:2.3:o:dbbroadcast:sft_dab_600\/c_firmware:1.9.3:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- www.exploit-db.com/exploits/51458nvdExploit
- www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5774.phpnvdExploitThird Party Advisory
- www.vulncheck.com/advisories/screen-sft-dab-c-firmware-authentication-bypass-admin-password-changenvdThird Party Advisory
- www.dbbroadcast.comnvdProduct
- www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/nvdProduct
News mentions
0No linked articles in our index yet.