MiniDVBLinux MiniDVBLinux(TM) Distribution (MLD) vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting MiniDVBLinux MiniDVBLinux(TM) Distribution (MLD): 1 record(s), with affected versions and fixes.

CVE-2023-53770 High · 7.5 CWE-260 Dec 9, 2025

MiniDVBLinux 5.4 Unauthenticated Configuration Download via Backup Endpoint

MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access sensitive system configuration files through a direct object reference. Attackers can exploit the backup download endpoint by sending a GET request with 'action=getconfig' to retrieve a complete system configuration archive containing sensitive credentials.