Lucene search
K

5 matches found

Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.1 views

PT-2025-52707

Name of the Vulnerable Software and Affected Versions Screen SFT DAB 600/C version 1.9.3 Description The software contains a weak session management issue that allows attackers to bypass authentication controls by reusing IP-bound session identifiers. Attackers can exploit the deviceManagement AP...

8.7CVSS6.8AI score0.00255EPSS
Exploits2References9
OSV
OSV
added 2025/12/10 10:16 p.m.0 views

CVE-2023-53775

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials...

6.5CVSS5.8AI score
Exploits0References6
EUVD
EUVD
added 2025/12/10 9:31 p.m.1 views

EUVD-2023-60185

Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without...

7.1CVSS6.5AI score0.00253EPSS
Exploits1References7
CVE
CVE
added 2025/12/10 9:8 p.m.11 views

CVE-2023-53775

Screen SFT DAB 1.9.3 contains an authentication bypass due to weak session management, enabling reuse of IP-bound session identifiers to issue unauthorized requests to the userManager API and change user credentials. Concrete details from PT-2025-50526: affected version 1.9.3; attack involves byp...

7.1CVSS6.7AI score0.00154EPSS
Exploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.2 views

PT-2025-50526

Name of the Vulnerable Software and Affected Versions Screen SFT DAB version 1.9.3 Description Screen SFT DAB 1.9.3 has a flaw in its authentication process, allowing unauthorized modification of user passwords. This is due to weak session management controls, specifically the reuse of IP-bound...

7.1CVSS6.8AI score0.00154EPSS
Exploits1References10
Rows per page
Query Builder