CVE-2026-29125: fallo de gravedad alta en International Datacasting Corporation SFX2100…
IDC SFX2100 Satellite Receiver allows unprivileged modification of DNS configuration due to world-writable `/etc/resolv.conf`
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.1epss 0.1%
IDC SFX2100 Satalite Recievers set the `/etc/resolv.conf` file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-middle attacks, and cause denial of service.
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H
Productos afectados
International Datacasting Corporation · SFX2100 Satellite ReceiverCVEs relacionadas — International Datacasting Corporation SFX2100…
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-29128HIGHIDC SFX2100 Satellite Receiver bgpd/ospfd/ripd/zebra Config Credential Disclosure via World-Readable FilesEPSS 0.3%CVE-2026-29127CRITICALIncorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX2100EPSS 0.2%CVE-2026-29121HIGH`/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPEEPSS 0.2%CVE-2026-29126HIGHWorld-Writable, Root Owned/Run `/etc/udhcpc/default.script` in IDC SFX2100 Satellite Receiver Leads To Potential LPEEPSS 0.2%CVE-2026-29122HIGH`/bin/date` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPEEPSS 0.2%CVE-2026-29123HIGHMultiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege EscalationEPSS 0.1%