CVE-2023-33684

medium

Description

Weak session management in DB Elettronica Telecomunicazioni SpA SFT DAB 600/C Firmware: 1.9.3 Bios firmware: 7.1 (Apr 19 2021) Gui: 2.46 FPGA: 169.55 uc: 6.15 allows attackers on the same network to bypass authentication by re-using the IP address assigned to the device by the NAT protocol.

References

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5771.php

Details

Source: Mitre, NVD

Published: 2023-06-06

Updated: 2024-02-16

Risk Information

CVSS v2

Base Score: 5.5

Vector: CVSS2#AV:A/AC:L/Au:S/C:N/I:C/A:N

Severity: Medium

CVSS v3

Base Score: 5.7

Vector: CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N