CVE-2023-53969

HighCVSS 7.5

Published: 22/12/2025(UTC)Updated: 28/10/2026(UTC)Translated: 28/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.51%

44th percentile - higher than 44% of all known CVEs

Summary

Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to change user passwords without proper authentication.

Risk Assessment

An attacker can change user passwords without authentication, taking over accounts and control of the device. The risk affects network-accessible devices running the vulnerable firmware.

Recommendation

Update the device firmware to the vendor-fixed version. Restrict network access to the userManager API and segment the devices.

Other vulnerabilities in Screen SFT DAB 600/C

CVE-2023-53968Critical
Screen SFT DAB 600/C Firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to remove user accounts without proper authentication.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS