Minidvblinux
Approved changes feed: RSS · Atom
cpe:2.3:a:minidvblinux:minidvblinux:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Minidvblinux (bc0d2583-bcf4-5328-b257-2d96cb1f36cc) |
|---|---|
| Product | Minidvblinux (0035bcd9-612c-5f84-b578-168e9577de22) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-25038 |
vulnerable | 2026-06-08 07:12:50.532862 |
MiniDVBLinux Root Command Injection
An OS command injection vulnerability exists in MiniDVBLinux version 5.4 and earlier. The system’s web-based management interface fails to properly sanitize user-supplied input before passing it to operating system commands. A remote unauthenticated attacker can exploit this vulnerability to execute arbitrary commands as the root user, potentially compromising the entire device. Exploitation evidence was observed by the Shadowserver Foundation on 2024-04-10 UTC.
Published: 2025-06-20T18:36:09.946Z
Updated: 2026-05-14T02:07:21.867Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53774 |
vulnerable | 2026-06-08 06:17:56.942186 |
MiniDVBLinux 5.4 Simple VideoDiskRecorder Protocol Remote Code Execution
MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk recorder remotely.
Published: 2025-12-09T20:56:46.780Z
Updated: 2026-04-07T14:06:51.744Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53773 |
vulnerable | 2026-06-08 06:17:56.940480 |
MiniDVBLinux 5.4 Unauthenticated Live Stream Disclosure via tv_action.sh
MiniDVBLinux 5.4 contains an unauthenticated vulnerability in the tv_action.sh script that allows remote attackers to generate live stream snapshots through the Simple VDR Protocol. Attackers can request /tpl/tv_action.sh to create and retrieve a live TV screenshot stored in /var/www/images/tv.jpg without authentication.
Published: 2025-12-09T20:55:58.650Z
Updated: 2026-04-07T14:06:51.034Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53772 |
vulnerable | 2026-06-08 06:17:56.940081 |
MiniDVBLinux 5.4 Arbitrary File Read Vulnerability via About Page
MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device.
Published: 2025-12-09T20:55:15.808Z
Updated: 2026-04-07T14:06:50.289Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53771 |
vulnerable | 2026-06-08 06:17:56.939731 |
MiniDVBLinux 5.4 Unauthenticated Root Password Change via System Setup
MiniDVBLinux 5.4 contains an authentication bypass vulnerability that allows remote attackers to change the root password without authentication. Attackers can send crafted POST requests to the system setup endpoint with modified SYSTEM_PASSWORD parameters to reset root credentials.
Published: 2025-12-09T20:54:46.109Z
Updated: 2026-04-07T14:06:49.578Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53770 |
vulnerable | 2026-06-08 06:17:56.938017 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-50691 |
vulnerable | 2026-06-08 05:52:03.447388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.