Advisories · Technology
International Datacasting Corporation SFX2100 Satellite Receiver.
Every CVE that names International Datacasting Corporation SFX2100 Satellite Receiver among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
IDC SFX2100 Satellite Receiver bgpd/ospfd/ripd/zebra Config Credential Disclosure via World-Readable Files
- International Datacasting Corporation SFX2100 Satellite Receiver
- Hard-coded credentials
- CVSS 9.2 CriticalCritical · CVSS 9+
Incorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX2100
- International Datacasting Corporation SFX2100 Satellite Receiver
- Privilege escalation
- CVSS 8.5 High
World-Writable, Root Owned/Run `/etc/udhcpc/default.script` in IDC SFX2100 Satellite Receiver Leads To Potential LPE
- International Datacasting Corporation SFX2100 Satellite Receiver
- Broken access control
- CVSS 7.1 High
IDC SFX2100 Satellite Receiver allows unprivileged modification of DNS configuration due to world-writable `/etc/resolv.conf`
- International Datacasting Corporation SFX2100 Satellite Receiver
- Broken access control
- CVSS 8.6 High
Multiple SUID Root Binaries in `monitor` User Home Directory Leading to Potential Local Privilege Escalation
- International Datacasting Corporation SFX2100 Satellite Receiver
- Privilege escalation
- CVSS 8.6 High
Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation
- International Datacasting Corporation SFX2100 Satellite Receiver
- Privilege escalation
- CVSS 8.3 High
`/bin/date` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE
- International Datacasting Corporation SFX2100 Satellite Receiver
- Privilege escalation
- CVSS 8.3 High
`/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE
- International Datacasting Corporation SFX2100 Satellite Receiver
- Privilege escalation