CVE-2023-53770

MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access sensitive system configuration files through a direct object reference. Attackers can exploit the backup download endpoint by sending a GET request with 'action=getconfig' to retrieve a complete system configuration archive containing sensitive credentials.

• CWE-260

• https://www.exploit-db.com/exploits/51091Exploit, Third Party Advisory, VDB Entry
• https://www.minidvblinux.deProduct
• https://www.vulncheck.com/advisories/minidvblinux-unauthenticated-configuration-download-via-backup-endpointThird Party Advisory
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5713.phpExploit, Third Party Advisory

Published

Dec 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-53765In the Linux kernel, the following vulnerability has been re…
• CVE-2023-53766In the Linux kernel, the following vulnerability has been re…
• CVE-2023-53767In the Linux kernel, the following vulnerability has been re…
• CVE-2023-53768In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-53769In the Linux kernel, the following vulnerability has been re…9.3
• CVE-2023-5377Out-of-bounds Read in GitHub repository gpac/gpac prior to v…7.1
• CVE-2023-53771MiniDVBLinux 5.4 contains an authentication bypass vulnerabi…9.8
• CVE-2023-53772MiniDVBLinux 5.4 contains an arbitrary file disclosure vulne…7.5
• CVE-2023-53773MiniDVBLinux 5.4 contains an unauthenticated vulnerability i…5.3
• CVE-2023-53774MiniDVBLinux 5.4 contains a remote code execution vulnerabil…9.8
• CVE-2023-53775Screen SFT DAB 1.9.3 contains an authentication bypass vulne…6.5
• CVE-2023-53776Screen SFT DAB 1.9.3 contains an authentication bypass vulne…8.8