PT-2026-22882 · Idc · Idc Sfx Series Superflex(Sfx2100) Satellitereceiver

Abdul Mhanni · Publicado 2026-03-04 · Atualizado 2026-03-05 · CVE-2026-29119

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IDC SFX Series SuperFlex(SFX2100) SatelliteReceiver (affected versions not specified)

Description The IDC SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded and insecure credentials for the admin account. A remote, unauthenticated attacker can exploit this to access the satellite system directly via the Telnet service, potentially compromising the system. The credentials allow direct access without authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2026-29119

Produtos afetados

Idc Sfx Series Superflex(Sfx2100) Satellitereceiver

Referências · 7

• 🔥 https://abdulmhsblog.com/posts/sfx2100-vulns · Exploit
• https://t.me/CVEtracker/46290 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2029113726519984428 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-29119 · Nota de Segurança
• https://twitter.com/CVEarity/status/2029546717679616015 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2029154604269649933 · Publicação no Twitter
• https://abdulmhsblog.com/posts/spfx-vulnrabilities · Nota