Vulnerability · Published Dec 10, 2025 · Assigned by VulnCheck

CVE-2023-53741Screen SFT DAB 1.9.3 Authentication Bypass via IP Session Management

Medium 5.1

In plain English

A medium-severity session fixation in Screen SFT DAB Series - Compact Radio DAB Transmitter from DB Elettronica Telecomunicazioni SpA. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 4.0)5.1Medium

Exploit odds (30 days)0.7%top 45.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without proper authorization.

Affected products (as reported)

Vendor	Product	Versions
DB Elettronica Telecomunicazioni SpA	Screen SFT DAB Series - Compact Radio DAB Transmitter	1.9.3

Weakness: CWE-384 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

References

ExploitDB-51457 exploit
Product Homepage product
Official Product Homepage product
Vendor Homepage vendor-advisory, vdb-entry
Vendor Security Advisory for ZSL-2023-5773 vendor-advisory, vdb-entry
VulnCheck Advisory: Screen SFT DAB 1.9.3 Authentication Bypass via IP Session Management third-party-advisory