Vulnerability · Published Dec 9, 2025 · Assigned by VulnCheck
CVE-2023-53771MiniDVBLinux 5.4 Unauthenticated Root Password Change via System Setup
Critical 9.3
In plain English
A critical-severity missing authentication in MiniDVBLinux Change Root Password PoC from MiniDVBLinux. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS 4.0)9.3Critical
Exploit odds (30 days)1.0%top 37.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
MiniDVBLinux 5.4 contains an authentication bypass vulnerability that allows remote attackers to change the root password without authentication. Attackers can send crafted POST requests to the system setup endpoint with modified SYSTEM_PASSWORD parameters to reset root credentials.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| MiniDVBLinux | MiniDVBLinux Change Root Password PoC | <=5.4 |
Weakness: CWE-306 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
References
- ExploitDB-51094 exploit
- Zero Science Lab Disclosure (ZSL-2022-5715) third-party-advisory
- Official Product Homepage product
- VulnCheck Advisory: MiniDVBLinux 5.4 Unauthenticated Root Password Change via System Setup third-party-advisory