CVE-2023-53771

critical · 9.3

MiniDVBLinux 5.4 contains an authentication bypass vulnerability that allows remote attackers to change the root password without authentication. Attackers can send crafted POST requests to the system setup endpoint with modified SYSTEM_PASSWORD parameters to reset root credentials.

9.3

CVSS

1.0%

EPSS (exploit prob.)

60th

EPSS percentile

2025-12-09

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-306

Affected products

Vendor	Product	Affected versions
minidvblinux	minidvblinux	<= 5.4

Check a specific version with /api/v1/cve/match.

References

https://www.exploit-db.com/exploits/51094
https://www.minidvblinux.de
https://www.vulncheck.com/advisories/minidvblinux-unauthenticated-root-password-change-via-system-setup
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5715.php

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-53771