PT-2026-23134 · Idc · Sfx2100 Satellite Receiver

Abdul Mhanni · Publicado 2026-03-05 · Atualizado 2026-03-08 · CVE-2026-29128

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IDC SFX2100 Satellite Receiver (affected versions not specified)

Description The IDC SFX2100 Satellite Receiver firmware includes daemon configuration files (zebra, bgpd, ospfd, and ripd) owned by root but accessible to all users. These files contain hardcoded plaintext passwords, including credentials for privileged access ('enable'). An attacker could exploit these exposed credentials to gain access to other systems on the network, compromise the satellite receiver, or escalate privileges locally.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficiently Protected Credentials

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-522

CWE-798

Identificadores relacionados

CVE-2026-29128

Produtos afetados

Sfx2100 Satellite Receiver

Referências · 6

• 🔥 https://abdulmhsblog.com/posts/sfx2100-vulns · Exploit
• https://abdulmhsblog.com/posts/spfx-vulnrabilities · Nota
• https://t.me/CVEtracker/46408 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-29128 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2029566741928415699 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2030755411830145491 · Publicação no Twitter