Screen SFT DAB 600/C vulnerabilities
4 known vulnerabilities in Screen SFT DAB 600/C from DB Elettronica Telecomunicazioni SpA. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Screen SFT DAB 600/C: Missing Authentication for Critical Functionality
Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP-bound session identifiers. Attackers can exploit the vulnerable deviceManagement API endpoint to reset de
- 7.5 High severity
Screen SFT DAB 600/C: Missing Authentication for Critical Functionality
Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the use
- 9.8 Critical severity
Screen SFT DAB 600/C: Missing Authentication for Critical Functionality
Screen SFT DAB 600/C Firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the use
- 7.5 High severity
Screen SFT DAB 600/C: Missing Authentication for Critical Functionality
Screen SFT DAB 600/C firmware 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without requiring the current credentials. Attackers can exploit the userManager.cgx API endpoint by sending a crafted POST r