| Package | Affected versions | Patched versions |
|---|---|---|
| minidvblinux | ≤ 5.4 |
An OS command injection vulnerability exists in MiniDVBLinux version 5.4 and earlier. The system’s web-based management interface fails to properly sanitize user-supplied input before passing it to operating system commands. A remote unauthenticated attacker can exploit this vulnerability to execute arbitrary commands as the root user, potentially compromising the entire device. Exploitation evidence was observed by the Shadowserver Foundation on 2024-04-10 UTC.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free