MiniDVBLinux 5.4 Simple VideoDiskRecorder Protocol Remote Code Execution
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.9%
exploitation probability
0.9%top 44% of all CVEs
observed exploitation
nono source reports it
MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk recorder remotely.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
References
https://www.exploit-db.com/exploits/51093https://www.linuxtv.org/vdrwiki/index.php/SVDRP#The_commandshttps://www.minidvblinux.dehttps://www.vulncheck.com/advisories/minidvblinux-simple-videodiskrecorder-protocol-remote-code-executionhttps://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5714.php