Unrated severityNVD Advisory· Published Dec 22, 2025· Updated Dec 22, 2025
Screen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Admin Password Change
CVE-2023-53967
Description
Screen SFT DAB 600/C firmware 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without requiring the current credentials. Attackers can exploit the userManager.cgx API endpoint by sending a crafted POST request with a new MD5-hashed password to directly modify the admin account's authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: = 1.9.3
Patches
Vulnerability mechanics
References
5- www.exploit-db.com/exploits/51458mitreexploit
- www.vulncheck.com/advisories/screen-sft-dab-c-firmware-authentication-bypass-admin-password-changemitrethird-party-advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5774.phpmitrethird-party-advisory
- www.dbbroadcast.commitreproduct
- www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/mitreproduct
News mentions
0No linked articles in our index yet.