Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.9	EPSS 0.9%	CVE-2023-53774Simple VideoDiskRecorder Protocol SVDRP (svdrpsend.sh) Exploit · Missing Authentication for Critical Function Medium6.9EPSS 0.9%2025-12-09CVE Database V5CVE-2023-53774 MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk recorder remotely. EPSS 0.9%Vulnerability MiniDVBLinux #cwe-306 Germany+5	CVE Database V5	2025-12-09
Critical	9.3	EPSS 1.0%	CVE-2023-53771MiniDVBLinux Change Root Password PoC · Missing Authentication for Critical Function Critical9.3EPSS 1.0%2025-12-09CVE Database V5CVE-2023-53771 MiniDVBLinux 5.4 contains an authentication bypass vulnerability that allows remote attackers to change the root password without authentication. Attackers can send crafted POST requests to the system setup endpoint with modified SYSTEM_PASSWORD parameters to reset root credentials. EPSS 1.0%Vulnerability MiniDVBLinux #cwe-306 Germany+9	CVE Database V5	2025-12-09
High	8.7	EPSS 0.5%	CVE-2023-53770MiniDVBLinux(TM) Distribution (MLD) · Password in Configuration File High8.7EPSS 0.5%2025-12-09CVE Database V5CVE-2023-53770 MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access sensitive system configuration files through a direct object reference. Attackers can exploit the backup download endpoint by sending a GET request with 'action=getconfig' to retrieve a complete system configuration archive containing sensitive credentials. EPSS 0.5%Vulnerability MiniDVBLinux #cwe-260 Germany+4	CVE Database V5	2025-12-09

Showing 1–3 of 3 results