CVE-2023-53774

M

iniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk recorder remotely.

Configurations

Configuration 1 (hide)

cpe:2.3:a:minidvblinux:minidvblinux:*:*:*:*:*:*:*:*

History

19 Dec 2025, 19:16

Type Values Removed Values Added
First Time Minidvblinux minidvblinux
Minidvblinux
CPE cpe:2.3:a:minidvblinux:minidvblinux:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
References () https://www.exploit-db.com/exploits/51093 - () https://www.exploit-db.com/exploits/51093 - Exploit, Third Party Advisory, VDB Entry
References () https://www.linuxtv.org/vdrwiki/index.php/SVDRP#The_commands - () https://www.linuxtv.org/vdrwiki/index.php/SVDRP#The_commands - Not Applicable
References () https://www.minidvblinux.de - () https://www.minidvblinux.de - Product
References () https://www.vulncheck.com/advisories/minidvblinux-simple-videodiskrecorder-protocol-remote-code-execution - () https://www.vulncheck.com/advisories/minidvblinux-simple-videodiskrecorder-protocol-remote-code-execution - Third Party Advisory
References () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5714.php - () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5714.php - Exploit, Third Party Advisory

12 Dec 2025, 15:19

Type Values Removed Values Added
New CVE

Information

Published : 2025-12-09 21:15

Updated : 2025-12-19 19:16


NVD link : CVE-2023-53774

Mitre link : CVE-2023-53774

CVE.ORG link : CVE-2023-53774


JSON object : View

Products Affected
CWE
CWE-306

Missing Authentication for Critical Function