CVE-2026-28775: International Datacasting Corporation (IDC) SFX2100

Описание

Оригинално описание

An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the `private` SNMP community string with read/write access by default. Because the SNMP agent runs as root, an unauthenticated remote attacker can utilize `NET-SNMP-EXTEND-MIB` directives, abusing the fact that the system runs a vulnerable version of net-snmp pre 5.8, to execute arbitrary operating system commands with root privileges.

Засегнати продукти

• International Datacasting Corporation (IDC) SFX2100 Series SuperFlex SatelliteReceiver: SFX2100

Вид слабост

• CWE-1188 Initialization of a Resource with an Insecure Default

История

Други уязвимости в International Datacasting Corporation (IDC) SFX2100 Series SuperFlex SatelliteReceiver

• 8.8CVE-2026-29119

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-28775
• https://nvd.nist.gov/vuln/detail/CVE-2026-28775
• https://www.abdulmhsblog.com/posts/sfx2100-vulns/