CVE-2023-7328: dbbroadcast sft dab 600/c firmware

csirt@kutim:~/threat-intel/cve/CVE-2023-7328

CVSS 5.3 · Medium EPSS 0,35%

Kerentanan Missing Authentication for Critical Function pada dbbroadcast sft dab 600/c firmware. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structured user data, including account names and connection metadata such as client IP and timeout values.

Rincian

Terbit di NVD: 14 November 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-306: Missing Authentication for Critical Function
EPSS (30 hari): 0,35% peluang dieksploitasi; lebih tinggi dari 26,3% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
dbbroadcast	sft dab 600/c firmware	Semua versi hingga 1.9.3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://packetstormsecurity.com/files/172332/ advisory pihak ketiga
https://www.vulncheck.com/advisories/screen-sft-dab-600c-unauthenticated-information-disclosure advisory pihak ketiga
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5776.php exploit · advisory pihak ketiga
https://www.exploit-db.com/exploits/51460 exploit
https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/ product

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.