MiniDVBLinux 5.4 Simple VideoDiskRecorder Protocol Remote Code Execution

Advisories

severity: medium
date: December 9, 2025
Affecting: MiniDVBLinux <= 5.4
CVE: CVE-2023-53774
CWE: CWE-306 Missing Authentication for Critical Function
CVSS: 6.9
CVSS V4 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
References: ExploitDB-51093
Zero Science Lab Disclosure (ZSL-2022-5714)
MiniDVBLinux Product Homepage
Credit: LiquidWorm as Gjoko Krstic of Zero Science Lab
Description: MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk recorder remotely.