PatchTheCVECVE-2023-7328: Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the use
CVE-2023-7328 is a medium-severity flaw (CVSS 5.3) affecting sft dab 600\/c firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structured user data, including account names and connection metadata such as client IP and timeout values.
Why this priority
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.4% (top 69%) |
| CISA exploited list | No |
| Weakness | CWE-306 |
| Published | 2025-11-14 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2023-7328?
sft dab 600\/c firmware: upgrade to newer than 1.9.3. Exact commands for each OS are on this page.
Is CVE-2023-7328 being exploited?
CVE-2023-7328 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2023-7328 affect?
CVE-2023-7328 affects sft dab 600\/c firmware. Severity is medium (CVSS 5.3). Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structured user data, including account names and connection metadata
How urgent is CVE-2023-7328?
Priority 36/100. Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2023-53969 HIGH 7.5 MITIGATE Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypas
- CVE-2023-53970 HIGH 7.5 MITIGATE Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows attackers to
- CVE-2023-53968 CRITICAL 9.8 MITIGATE Screen SFT DAB 600/C Firmware 1.9.3 contains a session management vulnerability that allows attackers to bypas
- CVE-2023-53967 HIGH 7.5 MITIGATE Screen SFT DAB 600/C firmware 1.9.3 contains an authentication bypass vulnerability that allows attackers to c
- CVE-2023-53776 HIGH 8.8 MITIGATE Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak ses