PT-2026-23121 · Idc · Sfx2100 Satellite Receiver

Abdul Mhanni · Publicado 2026-03-05 · Atualizado 2026-03-11 · CVE-2026-29125

Positive Technologies (AI Summary)

CVSS v4.0

7.1

Alta

Vetor base

AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H

Name of the Vulnerable Software and Affected Versions IDC SFX2100 Satellite Receiver (affected versions not specified)

Description The device sets the /etc/resolv.conf file to be world-writable, allowing any local user to modify DNS configuration. This can lead to DNS resolver tampering, potentially redirecting network communications, enabling man-in-the-middle attacks, and causing denial of service. The /etc/resolv.conf file is used to configure the DNS resolver, which translates domain names into IP addresses. When this file is world-writable, unauthorized users can alter the DNS settings, redirecting network traffic to malicious servers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2026-29125

Produtos afetados

Sfx2100 Satellite Receiver

Referências · 6

• 🔥 https://abdulmhsblog.com/posts/sfx2100-vulns · Exploit
• https://t.me/CVEtracker/46397 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2030755422714331464 · Publicação no Twitter
• https://t.me/cveNotify/155150 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-29125 · Nota de Segurança
• https://abdulmhsblog.com/posts/spfx-vulnrabilities · Nota