Paper/Archive/CVE-2023-53774

CVE-2023-53774

MiniDVBLinux Simple VideoDiskRecorder Protocol SVDRP (svdrpsend.sh) Exploit — MiniDVBLinux 5.4 Simple VideoDiskRecorder Protocol Remote Code Execution

EPSS 0.9%public exploit CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 60.4.604 × 2012.1 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk recorder remotely.

Affected

ProductAffectedFixed inSource

Simple VideoDiskRecorder Protocol SVDRP (svdrpsend.sh) Exploit<=5.4–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

VulnCheck (CNA)6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitexploit-db.com/exploits/51093 reflinuxtv.org/vdrwiki/index.php/SVDRP#The_commands writeupzeroscience.mk/en/vulnerabilities/ZSL-2022-5714.php refminidvblinux.de writeupvulncheck.com/advisories/minidvblinux-simple-videodiskrecorder-protocol-remote-code-execution