CVE-2023-7328CWE-306

Screen SFT DAB 600/C <= 1.9.3 Unauthenticated Information Disclosure

Medium · published November 14, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structured user data, including account names and connection metadata such as client IP and timeout values.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00371 · 29.9th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-11-14T22:51Z
EPSS history
Timeline
  • 14 NOV 22:51Z
    Screen SFT DAB 600/C <= 1.9.3 Unauthenticated Information Disclosure
    cvelistv5