CVE-2023-53970

Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP-bound session identifiers. Attackers can exploit the vulnerable deviceManagement API endpoint to reset device configurations by sending crafted POST requests with manipulated session parameters.

• CWE-306

• https://www.dbbroadcast.comProduct
• https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/Product
• https://www.exploit-db.com/exploits/51459Exploit
• https://www.vulncheck.com/advisories/screen-sft-dab-c-firmware-authentication-bypass-reset-board-configThird Party Advisory
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5775.phpExploit, Third Party Advisory
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5775.phpExploit, Third Party Advisory

Published

Dec 22, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-53965SOUND4 Server Service 4.1.102 contains an unquoted service p…7.8
• CVE-2023-53966SOUND4 LinkAndShare Transmitter 1.1.2 contains a format stri…9.8
• CVE-2023-53967Screen SFT DAB 600/C firmware 1.9.3 contains an authenticati…9.3
• CVE-2023-53968Screen SFT DAB 600/C Firmware 1.9.3 contains a session manag…9.8
• CVE-2023-53969Screen SFT DAB 600/C firmware 1.9.3 contains a session manag…9.3
• CVE-2023-5397Server receiving a malformed message to create a new connect…8.1
• CVE-2023-53971WebTareas 2.4 contains a file upload vulnerability that allo…8.8
• CVE-2023-53972WebTareas 2.4 contains a SQL injection vulnerability in the …7.5
• CVE-2023-53973Zillya Total Security 3.0.2367.0 contains a privilege escala…7.8
• CVE-2023-53974D-Link DSL-124 ME_1.00 contains a configuration file disclos…8.8
• CVE-2023-53975Atom CMS 2.0 contains an unauthenticated SQL injection vulne…9.3
• CVE-2023-53976myBB Forums 1.8.26 contains a stored cross-site scripting vu…5.4