CVEvulnerability
CVE-2023-33684
5.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-06-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.7 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Description
Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19 2021) Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication by re-using the IP address assigned to the device by the NAT protocol.
Affected configurations
• dbbroadcast sft dab 600\/c bios 7.1
• dbbroadcast sft dab 600\/c firmware 1.9.3
References
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5771.php Third Party Advisory
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5771.php Third Party Advisory