CRITICAL🇵🇱 Wersja polska

CVE-2023-53771

CVSS 9.3v4.0pub. 2025-12-09upd. 2025-12-19

MiniDVBLinux 5.4 contains an authentication bypass vulnerability that allows remote attackers to change the root password without authentication. Attackers can send crafted POST requests to the system setup endpoint with modified SYSTEM_PASSWORD parameters to reset root credentials.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Minidvblinux

    APP
    Minidvblinux
    ≤ 5.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2022-50691CRITICAL9.3PL ✓ten sam produkt

MiniDVBLinux 5.4 — zdalny RCE jako root przez command injection

CVE-2025-25038CRITICAL9.3PL ✓ten sam produkt

MiniDVBLinux ≤5.4 — OS command injection z pominięciem uwierzytelnienia

CVE-2023-53770HIGH8.7ten sam produkt

MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers...

CVE-2023-53772HIGH8.7ten sam produkt

MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive s...

CVE-2023-53773HIGH8.7ten sam produkt

MiniDVBLinux 5.4 contains an unauthenticated vulnerability in the tv_action.sh script that allows remote attac...