CVE-2023-53970

None

CVSS

—

EPSS

0.5%

Published

Dec 22, 2025

CISA due date

—

The record

Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP-bound session identifiers. Attackers can exploit the vulnerable deviceManagement API endpoint to reset device configurations by sending crafted POST requests with manipulated session parameters.

Affected packages

Ecosystem	Package	Introduced	Fixed