https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-53970.htmlhttps://patchthecve.com/cve/CVE-2023-53970.htmlWed, 17 Jun 2026 06:46:27 +0000HIGH 7.5: Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP-bound session identifiers. Attackers can exploit the vulnerable deviceManagement API endpoint to reset device configurations by sending crafted Phttps://patchthecve.com/cve/CVE-2023-53969.htmlhttps://patchthecve.com/cve/CVE-2023-53969.htmlWed, 28 Oct 2026 19:10:00 +0000HIGH 7.5: Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to change user passwords wihttps://patchthecve.com/cve/CVE-2023-53968.htmlhttps://patchthecve.com/cve/CVE-2023-53968.htmlWed, 17 Jun 2026 06:46:26 +0000CRITICAL 9.8: Screen SFT DAB 600/C Firmware 1.9.3 contains a session management vulnerability that allows attackers to bypass authentication controls by exploiting IP address session binding. Attackers can reuse the same IP address and issue unauthorized requests to the userManager API to remove user accounts withttps://patchthecve.com/cve/CVE-2023-53967.htmlhttps://patchthecve.com/cve/CVE-2023-53967.htmlWed, 17 Jun 2026 06:46:26 +0000HIGH 7.5: Screen SFT DAB 600/C firmware 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without requiring the current credentials. Attackers can exploit the userManager.cgx API endpoint by sending a crafted POST request with a new MD5-hashed password tohttps://patchthecve.com/cve/CVE-2023-53776.htmlhttps://patchthecve.com/cve/CVE-2023-53776.htmlWed, 17 Jun 2026 06:46:03 +0000HIGH 8.8: Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak session management by reusing IP-bound session identifiers. Attackers can issue unauthorized requests to the device management API by leveraging the session binding mechanism to perform criticahttps://patchthecve.com/cve/CVE-2023-53775.htmlhttps://patchthecve.com/cve/CVE-2023-53775.htmlWed, 17 Jun 2026 06:46:03 +0000MEDIUM 6.5: Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials withohttps://patchthecve.com/cve/CVE-2023-53741.htmlhttps://patchthecve.com/cve/CVE-2023-53741.htmlWed, 17 Jun 2026 06:45:59 +0000HIGH 8.1: Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without prohttps://patchthecve.com/cve/CVE-2023-53740.htmlhttps://patchthecve.com/cve/CVE-2023-53740.htmlWed, 17 Jun 2026 06:45:59 +0000CRITICAL 9.8: Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials. Attackers can exploit the userManager.cgx endpoint by sending a crafted JSON request with a new MD5-hashed password to directly modify thhttps://patchthecve.com/cve/CVE-2023-7328.htmlhttps://patchthecve.com/cve/CVE-2023-7328.htmlWed, 17 Jun 2026 06:52:32 +0000MEDIUM 5.3: Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structured user data, including account names and connection metadata such as client IP and timeout values.