International Datacasting Corporation (IDC) SFX2100 Series SuperFlex SatelliteReceiver vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting International Datacasting Corporation (IDC) SFX2100 Series SuperFlex SatelliteReceiver: 2 record(s), with affected versions and fixes.
CVE-2026-29119
Critical · 9.8
CWE-798 Mar 4, 2026
Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver
International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded and insecure credentials for the `admin` account. A remote unauthenticated attacker can use these undocumented credentials to access the satellite system directly via the Telnet service, leading to potential system compromise.
CVE-2026-28775
Critical · 9.8
CWE-1188 Mar 4, 2026
Unauthenticated RCE via SNMP Default Writable Community String
An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the `private` SNMP community string with read/write access by default. Because the SNMP agent runs as root, an unauthenticated remote attacker can utilize `NET-SNMP-EXTEND-MIB` directives, abusing the fact that the system runs a vulnerable version of net-snmp pre 5.8, to execute arbitrary operating system commands with root privileges.