More than 1,000 service providers worldwide use the platform, Ministra, which connects to set-top boxes in customer homes to deliver video on demand (VOD) content. Check Point researchers were able to string together several holes in the code in order to achieve remote code-execution (RCE) The vulnerabilities were fixed in version 5444, but not all vendors may not have updated their service, according to Check Point Research. With a full attackers could access subscriber data, they could expose the provider s financial details or change the content sent to customers.
Source: https://threatpost.com/streaming-video-tv-hijacking/145433/