DA
Vendor
Datacast
20
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-29128 | SF Sfx2100 Firmware Datacast | 10.0 | Mar 5 | IDC SFX2100 Satellite Receiver bgpd/ospfd/ripd/zebra Config Credential Disclosure via World-Readable Files |
| CVE-2026-29127 | SF Sfx2100 Firmware Datacast | 7.8 | Mar 5 | Incorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX2100 |
| CVE-2026-29126 | SF Sfx2100 Firmware Datacast | 7.8 | Mar 5 | World-Writable, Root Owned/Run `/etc/udhcpc/default.script` in IDC SFX2100 Satellite Receiver Leads To Potential LPE |
| CVE-2026-29125 | SF Sfx2100 Firmware Datacast | 4.7 | Mar 5 | IDC SFX2100 Satellite Receiver allows unprivileged modification of DNS configuration due to world-writable `/etc/resolv.conf` |
| CVE-2026-29124 | SF Sfx2100 Firmware Datacast | 7.8 | Mar 5 | Multiple SUID Root Binaries in `monitor` User Home Directory Leading to Potential Local Privilege Escalation |
| CVE-2026-29123 | SF Sfx2100 Firmware Datacast | 7.8 | Mar 5 | Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation |
| CVE-2026-29122 | SF Sfx2100 Firmware Datacast | 5.5 | Mar 5 | `/bin/date` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE |
| CVE-2026-29121 | SF Sfx2100 Firmware Datacast | 7.8 | Mar 5 | `/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE |
| CVE-2026-29120 | SF Sfx2100 Firmware Datacast | 7.8 | Mar 4 | Insecure, Hardcoded Root Password Stored in Anaconda Configuration File On IDC SFX2100 Satellite Receiver |
| CVE-2026-29119 | SF Sfx2100 Firmware Datacast | 9.8 | Mar 4 | Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver |
| CVE-2026-28778 | SF Sfx2100 Firmware Datacast | 9.8 | Mar 4 | Hardcoded FTP Credentials and LPE(via Insecure Permissions) for `xd` Local Account on IDC SFX2100 |
| CVE-2026-28777 | SF Sfx2100 Firmware Datacast | 9.8 | Mar 4 | Hardcoded and Insecure Credentials for "User" Local Account with SSH Access On IDC SFX2100 Satellite Receiver |
| CVE-2026-28776 | SF Sfx2100 Firmware Datacast | 9.8 | Mar 4 | Hardcoded and Insecure Credentials for "monitor" account with SSH Access On IDC SFX2100 Satellite Receiver |
| CVE-2026-28775 | SF Sfx2100 Firmware Datacast | 9.8 | Mar 4 | Unauthenticated RCE via SNMP Default Writable Community String |
| CVE-2026-28774 | SF Sfx2100 Firmware Datacast | 8.8 | Mar 4 | Authenticated OS Command Injection via Traceroute Utility leads to Root RCE |
| CVE-2026-28773 | SF Sfx2100 Firmware Datacast | 8.8 | Mar 4 | Authenticated OS Command Injection via Ping Utility Leading to RCE as Root |
| CVE-2026-28772 | SF Sfx2100 Firmware Datacast | 6.1 | Mar 4 | Reflected XSS in IDC_Logging Index endpoint |
| CVE-2026-28771 | SF Sfx2100 Firmware Datacast | 6.1 | Mar 4 | Reflected XSS In /index.cgi Endpoint On IDC Satellite Receiver Web Management Interface Version 101 |
| CVE-2026-28770 | SF Sfx2100 Firmware Datacast | 8.8 | Mar 4 | XML injection In /IDC_Logging/checkifdone.cgi Endpoint On IDC SFX Web Management Interface Version 101 |
| CVE-2026-28769 | SF Sfx2100 Firmware Datacast | 6.5 | Mar 4 | LFI in /IDC_Logging/checkifdone.cgi, "file" parameter Allowing for File Existence Enumeration On IDC Satellite Receiver Web Management Interface Version 101 |