PT-2026-23099 · Idc · Idc Sfx2100

Abdul Mhanni · Publicado 2026-03-05 · Atualizado 2026-03-11 · CVE-2026-29122

Positive Technologies (AI Summary)

CVSS v4.0

9.2

Crítica

Vetor base

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions IDC SFX2100 satellite receiver (affected versions not specified)

Description The IDC SFX2100 satellite receiver includes the /bin/date utility installed with the setuid bit set. This configuration allows any local user who can execute the binary to gain elevated privileges. A local actor can leverage the GTFObins resource to perform privileged file reads as the root user on the local file system. This enables an attacker to read root-owned, read-only files, such as the /etc/shadow file or other configuration and secrets files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2026-29122

Produtos afetados

Idc Sfx2100

Referências · 7

• 🔥 https://gtfobins.org/gtfobins/date · Exploit
• 🔥 https://abdulmhsblog.com/posts/sfx2100-vulns · Exploit
• https://abdulmhsblog.com/posts/spfx-vulnrabilities · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-29122 · Nota de Segurança
• https://t.me/cveNotify/155147 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2030755428368339063 · Publicação no Twitter
• https://t.me/CVEtracker/46391 · Publicação no Telegram