VulnerabilityAnalyzed
CVE-2023-53774
MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems.
MEDIUM 6.9EPSS 0.92%
Does this matter?
Lower severity and a low EPSS score (0.92%). Track it; it rarely justifies an emergency change on its own.
Description
MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk recorder remotely.
- CVSS 4.0
- 6.9 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.92% probability · 58th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-306
- Affected
- minidvblinux/minidvblinux
- Source
- disclosure@vulncheck.com
References
- https://www.exploit-db.com/exploits/51093Exploit, Third Party Advisory, VDB Entry
- https://www.linuxtv.org/vdrwiki/index.php/SVDRP#The_commandsNot Applicable
- https://www.minidvblinux.deProduct
- https://www.vulncheck.com/advisories/minidvblinux-simple-videodiskrecorder-protocol-remote-code-executionThird Party Advisory
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5714.phpExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.