CVE-2026-29128

all versions

IDC SFX2100 Satellite Receiver firmware ships with multiple daemon configuration files for routing components (e.g., zebra, bgpd,

10.0CRITICAL

CVE-2026-29127

all versions

The IDC SFX2100 Satellite Receiver sets overly permissive file system permissions on the monitor user's home directory. The direc

7.8HIGH

CVE-2026-29126

all versions

Incorrect permission assignment (world-writable file) in /etc/udhcpc/default.script in International Data Casting (IDC) SFX2100 S

7.8HIGH

CVE-2026-29125

all versions

IDC SFX2100 Satalite Recievers set the /etc/resolv.conf file to be world-writable by any local user, allowing DNS resolver tampe

4.7MEDIUM

CVE-2026-29124

all versions

Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/termin

7.8HIGH

CVE-2026-29123

all versions

A SUID root-owned binary in /home/xd/terminal/XDTerminal in International Data Casting (IDC) SFX2100 on Linux allows a local acto

7.8HIGH

CVE-2026-29122

all versions

International Data Casting (IDC) SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set.

5.5MEDIUM

CVE-2026-29121

all versions

International Data Casting (IDC) SFX2100 satellite receiver comes with the /sbin/ip utility installed with the setuid bit set.

7.8HIGH

CVE-2026-29120

all versions

The /root/anaconda-ks.cfg installation configuration file in International Datacasting Corporation (IDC) SFX Series(SFX2100) Super

7.8HIGH

CVE-2026-29119

all versions

International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded and insecure creden

9.8CRITICAL

CVE-2026-28778

all versions

International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver contains undocumented, hardcoded/insecure cred

9.8CRITICAL

CVE-2026-28777

all versions

International Datacasting Corporation (IDC) SFX2100 Satellite Receiver, trivial password for the user (usr) account. A remote

9.8CRITICAL

CVE-2026-28776

all versions

International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver contains hardcoded credentials for the `monitor

9.8CRITICAL

CVE-2026-28775

all versions

An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datacasting Corporation (

9.8CRITICAL

CVE-2026-28774

all versions

An OS Command Injection vulnerability exists in the web-based Traceroute diagnostic utility of International Datacasting Corporati

8.8HIGH

CVE-2026-28773

all versions

The web-based Ping diagnostic utility (/IDC_Ping/main.cgi) in International Datacasting Corporation (IDC) SFX Series SuperFlex Sat

8.8HIGH

CVE-2026-28772

all versions

A Reflected Cross-Site Scripting (XSS) vulnerability in the /IDC_Logging/index.cgi endpoint of International Datacasting Corporati

6.1MEDIUM

CVE-2026-28771

all versions

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the /index.cgi endpoint of International Datacasting Corporation (I

6.1MEDIUM

CVE-2026-28770

all versions

Improper neutralization of special elements in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (I

8.8HIGH

CVE-2026-28769

all versions

A path traversal vulnerability exists in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SF

6.5MEDIUM