High severity · published Mar 5, 2026
CVE-2026-29121
`/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
International Data Casting (IDC) SFX2100 satellite receiver comes with the `/sbin/ip` utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file reads as the root user on the local file system and may potentially lead to other avenues for preforming privileged actions.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
SFX2100 Satellite Receiver · International Datacasting Corporation
SFX2100 · source: vendor
SF
Sfx2100 Firmware · Datacast
All versions, or not specified · source: NVD
Affected product
SS
SFX2100 Satellite Receiver
International Datacasting Corporation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-29121
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-29121
Exploit
https://gtfobins.org/gtfobins/ip/
Exploit
https://www.abdulmhsblog.com/posts/sfx2100-vulns/
More from SFX2100 Satellite Receiver
10.0
CVE-2026-29128
IDC SFX2100 Satellite Receiver bgpd/ospfd/ripd/zebra Config Credential Disclosure via World-Readable Files
7.8
CVE-2026-29127
Incorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX2100
7.8
CVE-2026-29126
World-Writable, Root Owned/Run `/etc/udhcpc/default.script` in IDC SFX2100 Satellite Receiver Leads To Potential LPE
7.8
CVE-2026-29124
Multiple SUID Root Binaries in `monitor` User Home Directory Leading to Potential Local Privilege Escalation
7.8
CVE-2026-29123
Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation