CVE-2023-33684
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C firmware allows attackers on the same network to bypass authentication by re-using the IP address assigned to the device by the NAT protocol.
Risk Assessment
The organization may be exposed to unauthorized access to devices, potentially leading to data breaches or other malicious activities.
Recommendation
It is recommended to update the firmware to the latest version and implement additional security measures such as network segmentation.
Original NVD description (English source)
Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19 2021) Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication by re-using the IP address assigned to the device by the NAT protocol.