SF
Product
Sfx2100 Firmware
20
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 9Medium 5Low 0
Watch
Add Sfx2100 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-29128 | 10.0 | Mar 5 | IDC SFX2100 Satellite Receiver bgpd/ospfd/ripd/zebra Config Credential Disclosure via World-Readable Files Affected: All versions, or not specified |
| CVE-2026-29119 | 9.8 | Mar 4 | Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver Affected: All versions, or not specified |
| CVE-2026-28778 | 9.8 | Mar 4 | Hardcoded FTP Credentials and LPE(via Insecure Permissions) for `xd` Local Account on IDC SFX2100 Affected: All versions, or not specified |
| CVE-2026-28777 | 9.8 | Mar 4 | Hardcoded and Insecure Credentials for "User" Local Account with SSH Access On IDC SFX2100 Satellite Receiver Affected: All versions, or not specified |
| CVE-2026-28776 | 9.8 | Mar 4 | Hardcoded and Insecure Credentials for "monitor" account with SSH Access On IDC SFX2100 Satellite Receiver Affected: All versions, or not specified |
| CVE-2026-28775 | 9.8 | Mar 4 | Unauthenticated RCE via SNMP Default Writable Community String Affected: All versions, or not specified |
| CVE-2026-28774 | 8.8 | Mar 4 | Authenticated OS Command Injection via Traceroute Utility leads to Root RCE Affected: All versions, or not specified |
| CVE-2026-28773 | 8.8 | Mar 4 | Authenticated OS Command Injection via Ping Utility Leading to RCE as Root Affected: All versions, or not specified |
| CVE-2026-28770 | 8.8 | Mar 4 | XML injection In /IDC_Logging/checkifdone.cgi Endpoint On IDC SFX Web Management Interface Version 101 Affected: All versions, or not specified |
| CVE-2026-29127 | 7.8 | Mar 5 | Incorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX2100 Affected: All versions, or not specified |
| CVE-2026-29126 | 7.8 | Mar 5 | World-Writable, Root Owned/Run `/etc/udhcpc/default.script` in IDC SFX2100 Satellite Receiver Leads To Potential LPE Affected: All versions, or not specified |
| CVE-2026-29124 | 7.8 | Mar 5 | Multiple SUID Root Binaries in `monitor` User Home Directory Leading to Potential Local Privilege Escalation Affected: All versions, or not specified |
| CVE-2026-29123 | 7.8 | Mar 5 | Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation Affected: All versions, or not specified |
| CVE-2026-29121 | 7.8 | Mar 5 | `/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE Affected: All versions, or not specified |
| CVE-2026-29120 | 7.8 | Mar 4 | Insecure, Hardcoded Root Password Stored in Anaconda Configuration File On IDC SFX2100 Satellite Receiver Affected: All versions, or not specified |
| CVE-2026-28769 | 6.5 | Mar 4 | LFI in /IDC_Logging/checkifdone.cgi, "file" parameter Allowing for File Existence Enumeration On IDC Satellite Receiver Web Management Interface Version 101 Affected: All versions, or not specified |
| CVE-2026-28772 | 6.1 | Mar 4 | Reflected XSS in IDC_Logging Index endpoint Affected: All versions, or not specified |
| CVE-2026-28771 | 6.1 | Mar 4 | Reflected XSS In /index.cgi Endpoint On IDC Satellite Receiver Web Management Interface Version 101 Affected: All versions, or not specified |
| CVE-2026-29122 | 5.5 | Mar 5 | `/bin/date` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE Affected: All versions, or not specified |
| CVE-2026-29125 | 4.7 | Mar 5 | IDC SFX2100 Satellite Receiver allows unprivileged modification of DNS configuration due to world-writable `/etc/resolv.conf` Affected: All versions, or not specified |
Showing 20