Unrated severityNVD Advisory· Published Dec 9, 2025· Updated Apr 7, 2026
MiniDVBLinux 5.4 Unauthenticated Configuration Download via Backup Endpoint
CVE-2023-53770
Description
MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access sensitive system configuration files through a direct object reference. Attackers can exploit the backup download endpoint by sending a GET request with 'action=getconfig' to retrieve a complete system configuration archive containing sensitive credentials.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: = 5.4
- MiniDVBLinux/MiniDVBLinux(TM) Distribution (MLD)v5Range: <=5.4
Patches
Vulnerability mechanics
References
4- www.exploit-db.com/exploits/51091mitreexploit
- www.vulncheck.com/advisories/minidvblinux-unauthenticated-configuration-download-via-backup-endpointmitrethird-party-advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5713.phpmitrethird-party-advisory
- www.minidvblinux.demitreproduct
News mentions
0No linked articles in our index yet.