Vulnerability · Published Dec 10, 2025 · Assigned by VulnCheck

CVE-2023-53740Screen SFT DAB 1.9.3 Authentication Bypass via Admin Password Change

High 8.6

In plain English

A high-severity missing authorization in Screen SFT DAB Series - Compact Radio DAB Transmitter from DB Elettronica Telecomunicazioni SpA. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).

Severity (CVSS 4.0)8.6High

Exploit odds (30 days)0.9%top 40.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials. Attackers can exploit the userManager.cgx endpoint by sending a crafted JSON request with a new MD5-hashed password to directly modify the admin account.

Affected products (as reported)

Vendor	Product	Versions
DB Elettronica Telecomunicazioni SpA	Screen SFT DAB Series - Compact Radio DAB Transmitter	1.9.3

Weakness: CWE-862 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

References

ExploitDB-51458 exploit
Product Homepage product
Official Product Homepage product
Vendor Homepage vendor-advisory, vdb-entry
Advisory URL vendor-advisory, vdb-entry
VulnCheck Advisory: Screen SFT DAB 1.9.3 Authentication Bypass via Admin Password Change third-party-advisory