PT-2025-50268 · Unknown · Minidvblinux

Published 2025-12-09 · Updated 2025-12-19 · CVE-2023-53771

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MiniDVBLinux version 5.4

Description The software contains a flaw that allows remote attackers to bypass authentication and modify the root password. This is achieved by sending specially crafted POST requests to the system setup endpoint, specifically manipulating the SYSTEM PASSWORD parameter. This allows unauthorized access to change root credentials.

Recommendations Apply any available updates or patches to address the authentication bypass issue. As a temporary workaround, restrict access to the system setup endpoint.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2023-53771

Affected Products

Minidvblinux

References · 11

• 🔥 https://exploit-db.com/exploits/51094 · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2022-5715.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53771 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53771 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1998605250391896283 · Twitter Post
• https://minidvblinux.de · Note
• https://vulncheck.com/advisories/minidvblinux-unauthenticated-root-password-change-via-system-setup · Note
• https://t.me/CVEtracker/39298 · Telegram Post
• https://twitter.com/0dayPublishing/status/1998500520843936103 · Twitter Post
• https://t.me/cveNotify/146391 · Telegram Post
• https://twitter.com/CVEnew/status/1998732785759170991 · Twitter Post