CVE-2023-7328

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-7328

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

S

creen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structured user data, including account names and connection metadata such as client IP and timeout values.

References
Link Resource
https://packetstormsecurity.com/files/172332/ Third Party Advisory
https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/ Product
https://www.exploit-db.com/exploits/51460 Exploit
https://www.vulncheck.com/advisories/screen-sft-dab-600c-unauthenticated-information-disclosure Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5776.php Exploit Third Party Advisory
https://www.exploit-db.com/exploits/51460 Exploit
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5776.php Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dbbroadcast:sft_dab_600\/c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dbbroadcast:sft_dab_600\/c:-:*:*:*:*:*:*:*
History

26 Dec 2025, 16:45

Type Values Removed Values Added
First Time Dbbroadcast sft Dab 600\/c
Dbbroadcast
Dbbroadcast sft Dab 600\/c Firmware
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.3
References () https://packetstormsecurity.com/files/172332/ - () https://packetstormsecurity.com/files/172332/ - Third Party Advisory
References () https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/ - () https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/ - Product
References () https://www.exploit-db.com/exploits/51460 - () https://www.exploit-db.com/exploits/51460 - Exploit
References () https://www.vulncheck.com/advisories/screen-sft-dab-600c-unauthenticated-information-disclosure - () https://www.vulncheck.com/advisories/screen-sft-dab-600c-unauthenticated-information-disclosure - Third Party Advisory
References () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5776.php - () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5776.php - Exploit, Third Party Advisory
CPE cpe:2.3:o:dbbroadcast:sft_dab_600\/c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dbbroadcast:sft_dab_600\/c:-:*:*:*:*:*:*:*

18 Nov 2025, 17:15

Type Values Removed Values Added
References () https://www.exploit-db.com/exploits/51460 - () https://www.exploit-db.com/exploits/51460 -
References () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5776.php - () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5776.php -

14 Nov 2025, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-11-14 23:15

Updated : 2025-12-26 16:45

NVD link : CVE-2023-7328

Mitre link : CVE-2023-7328

CVE.ORG link : CVE-2023-7328

JSON object : View

Products Affected

dbbroadcast

CWE
CWE-306

Missing Authentication for Critical Function