What’s Vulnerable › Products
International Datacasting Corporation SFX2100 Satellite Receiver vulnerabilities
20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 20 published in the last 12 months.
Latest International Datacasting Corporation SFX2100 Satellite Receiver vulnerabilities
- CVE-2026-29128 — IDC SFX2100 Satellite Receiver bgpd/ospfd/ripd/zebra Config Credential Disclosure via World-Readable Files (CVSS 10.0)
- CVE-2026-29127 — Incorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX2100 (CVSS 7.8)
- CVE-2026-29126 — World-Writable, Root Owned/Run `/etc/udhcpc/default.script` in IDC SFX2100 Satellite Receiver Leads To Potential LPE (CVSS 7.8)
- CVE-2026-29125 — IDC SFX2100 Satellite Receiver allows unprivileged modification of DNS configuration due to world-writable `/etc/resolv.conf` (CVSS 4.7)
- CVE-2026-29124 — Multiple SUID Root Binaries in `monitor` User Home Directory Leading to Potential Local Privilege Escalation (CVSS 7.8)
- CVE-2026-29123 — Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation (CVSS 7.8)
- CVE-2026-29122 — `/bin/date` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE (CVSS 5.5)
- CVE-2026-29121 — `/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE (CVSS 7.8)
- CVE-2026-29120 — Insecure, Hardcoded Root Password Stored in Anaconda Configuration File On IDC SFX2100 Satellite Receiver (CVSS 7.8)
- CVE-2026-29119 — Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver (CVSS 9.8)
- CVE-2026-28778 — Hardcoded FTP Credentials and LPE(via Insecure Permissions) for `xd` Local Account on IDC SFX2100 (CVSS 9.8)
- CVE-2026-28777 — Hardcoded and Insecure Credentials for "User" Local Account with SSH Access On IDC SFX2100 Satellite Receiver (CVSS 9.8)
- CVE-2026-28776 — Hardcoded and Insecure Credentials for "monitor" account with SSH Access On IDC SFX2100 Satellite Receiver (CVSS 9.8)
- CVE-2026-28775 — Unauthenticated RCE via SNMP Default Writable Community String (CVSS 9.8)
- CVE-2026-28774 — Authenticated OS Command Injection via Traceroute Utility leads to Root RCE (CVSS 8.8)
- CVE-2026-28773 — Authenticated OS Command Injection via Ping Utility Leading to RCE as Root (CVSS 8.8)
- CVE-2026-28772 — Reflected XSS in IDC_Logging Index endpoint (CVSS 6.1)
- CVE-2026-28771 — Reflected XSS In /index.cgi Endpoint On IDC Satellite Receiver Web Management Interface Version 101 (CVSS 6.1)
- CVE-2026-28770 — XML injection In /IDC_Logging/checkifdone.cgi Endpoint On IDC SFX Web Management Interface Version 101 (CVSS 8.8)
- CVE-2026-28769 — LFI in /IDC_Logging/checkifdone.cgi, "file" parameter Allowing for File Existence Enumeration On IDC Satellite Receiver Web Management Interface Version 101 (CVSS 6.5)