CVE-2023-53774

MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk recorder remotely.
Configurations

Configuration 1 (hide)

cpe:2.3:a:minidvblinux:minidvblinux:*:*:*:*:*:*:*:*

History

19 Dec 2025, 19:16

Type Values Removed Values Added
CPE cpe:2.3:a:minidvblinux:minidvblinux:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
First Time Minidvblinux
Minidvblinux minidvblinux
References () https://www.exploit-db.com/exploits/51093 - () https://www.exploit-db.com/exploits/51093 - Exploit, Third Party Advisory, VDB Entry
References () https://www.linuxtv.org/vdrwiki/index.php/SVDRP#The_commands - () https://www.linuxtv.org/vdrwiki/index.php/SVDRP#The_commands - Not Applicable
References () https://www.minidvblinux.de - () https://www.minidvblinux.de - Product
References () https://www.vulncheck.com/advisories/minidvblinux-simple-videodiskrecorder-protocol-remote-code-execution - () https://www.vulncheck.com/advisories/minidvblinux-simple-videodiskrecorder-protocol-remote-code-execution - Third Party Advisory
References () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5714.php - () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5714.php - Exploit, Third Party Advisory

09 Dec 2025, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-12-09 21:15

Updated : 2025-12-19 19:16


NVD link : CVE-2023-53774

Mitre link : CVE-2023-53774

CVE.ORG link : CVE-2023-53774


JSON object : View

Products Affected

minidvblinux

  • minidvblinux
CWE
CWE-306

Missing Authentication for Critical Function