CVE-2023-53771

CRITICAL 9.8CVE-2023-53771 · Published 09/12/2025 · updated 17/06/2026

Package	Affected versions	Patched versions
minidvblinux minidvblinux	`≤ 5.4`	No fix yet

Description

MiniDVBLinux 5.4 contains an authentication bypass vulnerability that allows remote attackers to change the root password without authentication. Attackers can send crafted POST requests to the system setup endpoint with modified SYSTEM_PASSWORD parameters to reset root credentials.

References

exploit-db.com/exploits/51094 · Exploit
minidvblinux.de · Product
vulncheck.com/advisories/minidvblinux-unauthenticated-root-password-change-via-system-setup · Third Party Advisory
zeroscience.mk/en/vulnerabilities/ZSL-2022-5715.php · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free