Lucene search
K

5 matches found

NVD
NVD
added 2025/12/10 10:16 p.m.2 views

CVE-2023-53775

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials...

7.1CVSS0.00154EPSS
Exploits1References6
OSV
OSV
added 2025/12/10 9:16 p.m.3 views

CVE-2023-53741

Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without...

8.1CVSS5.8AI score
Exploits0References6
NVD
NVD
added 2025/12/10 9:16 p.m.3 views

CVE-2023-53741

Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without...

8.1CVSS0.00253EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/10 9:8 p.m.1 views

CVE-2023-53775 Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials...

7.1CVSS6.7AI score0.00154EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/12/10 9:8 p.m.15 views

CVE-2023-53775 Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials...

7.1CVSS0.00154EPSS
Exploits1References6
Rows per page
Query Builder