CVE-2023-53741 Screen SFT DAB 1.9.3 Authentication Bypass via IP Session Management
Attackers can bypass authentication by reusing IP-bound sessions to remove user accounts on Screen SFT DAB transmitters.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-53741?
CVE-2023-53741 is a medium-severity authentication bypass vulnerability in DB Elettronica Telecomunicazioni SpA Screen SFT DAB Series - Compact Radio DAB Transmitter, published on 10 Dec 2025. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without proper authorization.
Weakness: CWE-384
Which versions are affected by CVE-2023-53741?
It affects 5 products.
Products include Dbbroadcast Sft Dab 015\/C Firmware, Dbbroadcast Sft Dab 050\/C Firmware, Dbbroadcast Sft Dab 150\/C Firmware, Dbbroadcast Sft Dab 300\/C Firmware, Dbbroadcast Sft Dab 600\/C Firmware.
How do I fix CVE-2023-53741?
No fix has been published for CVE-2023-53741 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-53741 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-53741 exists.
Other vulnerabilities in DB Elettronica Telecomunicazioni SpA Screen SFT DAB Series - Compact Radio DAB Transmitter
Sources
Also known as GHSA-cc99-r8rx-5vcx.