PT-2025-50270 · Unknown · Minidvblinux

Published 2025-12-09 · Updated 2025-12-10 · CVE-2023-53773

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions MiniDVBLinux version 5.4

Description The software contains an unauthenticated issue in the tv action.sh script. This allows remote attackers to generate live stream snapshots using the Simple VDR Protocol. Attackers can request the /tpl/tv action.sh endpoint to create and retrieve a live TV screenshot stored in /var/www/images/tv.jpg without needing to authenticate.

Recommendations Apply any available updates to address the issue in the tv action.sh script. As a temporary workaround, restrict access to the /tpl/tv action.sh endpoint.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2023-53773

Affected Products

Minidvblinux

References · 8

• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2022-5716.php · Exploit
• 🔥 https://exploit-db.com/exploits/51095 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53773 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53773 · Vendor Advisory
• https://vulncheck.com/advisories/minidvblinux-unauthenticated-live-stream-disclosure-via-tvactionsh · Note
• https://twitter.com/CVEnew/status/1998732783624257671 · Twitter Post
• https://t.me/CVEtracker/39300 · Telegram Post
• https://minidvblinux.de · Note