CVE-2023-7328 | DB Elettronica Telecomunicazioni SpA Screen SFT DAB 600-C up to 1.9.3 User Management API client IP/timeout missing authentication (Exploit 172332 / EDB-51460)

A vulnerability labeled as critical has been found in DB Elettronica Telecomunicazioni SpA Screen SFT DAB 600-C up to 1.9.3. Affected by this vulnerability is an unknown functionality of the component User Management API. Such manipulation of the argument client IP/timeout leads to missing authentication.

This vulnerability is uniquely identified as CVE-2023-7328. The attack can be launched remotely. Moreover, an exploit is present.

Restrictive firewalling should be applied.