Vulnerabilidades en International Datacasting Corporation (IDC)
11 resultadosAnálisis Vexday
A International Datacasting Corporation apresenta um perfil de risco moderado com 11 vulnerabilidades catalogadas, sendo 4 de severidade crítica, porém nenhuma sob exploração ativa conhecida. A ausência de divulgações recentes e de ataques em andamento sugere uma superfície de risco estável, embora a fraqueza dominante em credenciais hardcoded (CWE-798) permaneça como vetor de preocupação estrutural em seus produtos.
CVE-2026-28774CRITICALAuthenticated OS Command Injection via Traceroute Utility leads to Root RCEEPSS 2.4%CVE-2026-28773CRITICALAuthenticated OS Command Injection via Ping Utility Leading to RCE as RootEPSS 2.1%CVE-2026-28775CRITICALUnauthenticated RCE via SNMP Default Writable Community StringEPSS 1.2%CVE-2026-28778HIGHHardcoded FTP Credentials and LPE(via Insecure Permissions) for `xd` Local Account on IDC SFX2100EPSS 0.8%CVE-2026-28769MEDIUMLFI in /IDC_Logging/checkifdone.cgi, "file" parameter Allowing for File Existence Enumeration On IDC Satellite Receiver Web Management Interface Version 101EPSS 0.6%CVE-2026-29119HIGHHardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite ReceiverEPSS 0.5%CVE-2026-28777CRITICALHardcoded and Insecure Credentials for "User" Local Account with SSH Access On IDC SFX2100 Satellite ReceiverEPSS 0.5%CVE-2026-28776HIGHHardcoded and Insecure Credentials for "monitor" account with SSH Access On IDC SFX2100 Satellite ReceiverEPSS 0.5%CVE-2026-28770MEDIUMXML injection In /IDC_Logging/checkifdone.cgi Endpoint On IDC SFX Web Management Interface Version 101EPSS 0.4%CVE-2026-28771MEDIUMReflected XSS In /index.cgi Endpoint On IDC Satellite Receiver Web Management Interface Version 101EPSS 0.2%CVE-2026-28772MEDIUMReflected XSS in IDC_Logging Index endpointEPSS 0.2%