CVE-2023-53741
HIGHScreen SFT DAB Series - Compact Radio DAB Transmitter 1.9.3 - Authentication Bypass via IP Session Reuse
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-53741. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in Screen SFT DAB 600/C devices by reusing a victim's IP-bound session to delete a user account via an unauthorized API call.
Description
Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without proper authorization.
Exploits (1)
This exploit demonstrates an authentication bypass vulnerability in Screen SFT DAB 600/C devices by reusing a victim's IP-bound session to delete a user account via an unauthorized API call.
References (6)
Scores
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H