CVE-2023-53967

Screen SFT DAB 600/C firmware 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without requiring the current credentials. Attackers can exploit the userManager.cgx API endpoint by sending a crafted POST request with a new MD5-hashed password to directly modify the admin account's authentication.

• CWE-306

• https://www.dbbroadcast.comProduct
• https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/Product
• https://www.exploit-db.com/exploits/51458Exploit
• https://www.vulncheck.com/advisories/screen-sft-dab-c-firmware-authentication-bypass-admin-password-changeThird Party Advisory
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5774.phpExploit, Third Party Advisory
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5774.phpExploit, Third Party Advisory

Published

Dec 22, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-53961SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains a cross-site req…5.1
• CVE-2023-53962SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticat…8.8
• CVE-2023-53963SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticat…9.8
• CVE-2023-53964SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticat…9.8
• CVE-2023-53965SOUND4 Server Service 4.1.102 contains an unquoted service p…7.8
• CVE-2023-53966SOUND4 LinkAndShare Transmitter 1.1.2 contains a format stri…9.8
• CVE-2023-53968Screen SFT DAB 600/C Firmware 1.9.3 contains a session manag…9.8
• CVE-2023-53969Screen SFT DAB 600/C firmware 1.9.3 contains a session manag…9.3
• CVE-2023-5397Server receiving a malformed message to create a new connect…8.1
• CVE-2023-53970Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session …8.7
• CVE-2023-53971WebTareas 2.4 contains a file upload vulnerability that allo…8.8
• CVE-2023-53972WebTareas 2.4 contains a SQL injection vulnerability in the …7.5