dbbroadcast vulnerabilities

Recent CVEs affecting dbbroadcast products. 26 tracked.

dbbroadcast has 26 tracked vulnerabilities, 13 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-12-22. Highest priority: CVE-2025-66253 (score 68/100).

• CVE-2023-53969 HIGH 7.5 MITIGATE Screen SFT DAB 600/C firmware 1.9.3 contains a session management vulnerability that allows attackers to bypas
• CVE-2025-66263 HIGH 7.5 MITIGATE MITIGATE Unauthenticated Arbitrary File Read via Null Byte Injection in DB Electronica Telecomunicazioni S.p.A
• CVE-2025-66253 CRITICAL 9.8 MITIGATE MITIGATE Unauthenticated OS Command Injection (start_upgrade.php) in DB Electronica Telecomunicazioni S.p.A
• CVE-2025-66261 CRITICAL 9.8 MITIGATE MITIGATE Unauthenticated OS Command Injection (restore_settings.php) in DB Electronica Telecomunicazioni S.p.A
• CVE-2025-66262 CRITICAL 9.8 MITIGATE MITIGATE Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A
• CVE-2025-66259 CRITICAL 9.8 MITIGATE MITIGATE Authenticated Root Remote Code Execution via improrer user input filtering in DB Electronica Telecomunicazioni
• CVE-2025-66250 CRITICAL 9.8 MITIGATE MITIGATE Unauthenticated Arbitrary File Upload (status_contents.php) in DB Electronica Telecomunicazioni S.p.A
• CVE-2025-66256 CRITICAL 9.8 MITIGATE MITIGATE Unauthenticated Arbitrary File Upload (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A
• CVE-2025-66251 CRITICAL 9.1 MITIGATE MITIGATE Unauthenticated Path Traversal with Arbitrary File Deletion in DB Electronica Telecomunicazioni S.p.A
• CVE-2025-66255 CRITICAL 9.8 MITIGATE MITIGATE Unauthenticated Arbitrary File Upload (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A
• CVE-2025-66254 CRITICAL 9.1 MITIGATE MITIGATE Unauthenticated Arbitrary File Deletion (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A
• CVE-2025-66257 CRITICAL 9.1 MITIGATE MITIGATE Unauthenticated Arbitrary File Deletion (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A
• CVE-2025-66252 HIGH 7.5 MITIGATE MITIGATE Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A
• CVE-2025-66260 MEDIUM 6.5 MITIGATE MITIGATE PostgreSQL SQL Injection (status_sql.php) in DB Electronica Telecomunicazioni S.p.A
• CVE-2025-66258 MEDIUM 5.4 MITIGATE MITIGATE Stored Cross-Site Scripting via XML Injection in DB Electronica Telecomunicazioni S.p.A
• CVE-2025-63229 MEDIUM 5.4 MITIGATE MITIGATE The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a reflected Cross-Site
• CVE-2025-63228 CRITICAL 9.8 MITIGATE MITIGATE The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file
• CVE-2025-63227 HIGH 7.2 MITIGATE MITIGATE The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file up
• CVE-2023-7328 MEDIUM 5.3 UPGRADE Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the use
• CVE-2023-53970 HIGH 7.5 MITIGATE Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows attackers to
• CVE-2023-53968 CRITICAL 9.8 MITIGATE Screen SFT DAB 600/C Firmware 1.9.3 contains a session management vulnerability that allows attackers to bypas
• CVE-2023-53967 HIGH 7.5 MITIGATE Screen SFT DAB 600/C firmware 1.9.3 contains an authentication bypass vulnerability that allows attackers to c
• CVE-2023-53776 HIGH 8.8 MITIGATE Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to exploit weak ses
• CVE-2023-53775 MEDIUM 6.5 MITIGATE Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user pass
• CVE-2023-53741 HIGH 8.1 MITIGATE MITIGATE Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authenti
• CVE-2023-53740 CRITICAL 9.8 MITIGATE MITIGATE Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin

FAQ

How do I fix dbbroadcast vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is dbbroadcast being exploited right now?

None of the tracked dbbroadcast CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which dbbroadcast CVE should I patch first?

CVE-2025-66253 currently ranks highest (68/100): Unauthenticated OS Command Injection (start_upgrade.php) in DB Electronica Telecomunicazioni S.p.A.

Products

• mozart next 100 firmware
• mozart next 1000 firmware
• mozart next 2000 firmware
• mozart next 30 firmware
• mozart next 300 firmware
• mozart next 3000 firmware
• mozart next 3500 firmware
• mozart next 50 firmware
• mozart next 500 firmware
• mozart next 6000 firmware
• mozart next 7000 firmware
• sft dab 015\/c firmware
• sft dab 050\/c firmware
• sft dab 150\/c firmware
• sft dab 300\/c firmware
• sft dab 600\/c firmware

RSS feed for dbbroadcast · ← Back to latest CVEs