Approved changes feed: RSS · Atom

cpe:2.3:a:international_datacasting_corporation_(idc):sfx2100_series_superflex_satellitereceiver:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInternational Datacasting Corporation (Idc) (282b45a7-0b11-5930-9a66-e046bf74c301)
ProductSfx2100 Series Superflex Satellitereceiver (f159ebf0-4bec-5c82-9111-b2d07815d9f3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-29119 vulnerable 2026-06-08 07:55:16.123078 Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver
International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded and insecure credentials for the `admin` account. A remote unauthenticated attacker can use these undocumented credentials to access the satellite system directly via the Telnet service, leading to potential system compromise.
Published: 2026-03-04T07:58:16.199Z
Updated: 2026-03-05T05:58:16.802Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-28775 vulnerable 2026-06-08 07:55:15.646258 Unauthenticated RCE via SNMP Default Writable Community String
An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the `private` SNMP community string with read/write access by default. Because the SNMP agent runs as root, an unauthenticated remote attacker can utilize `NET-SNMP-EXTEND-MIB` directives, abusing the fact that the system runs a vulnerable version of net-snmp pre 5.8, to execute arbitrary operating system commands with root privileges.
Published: 2026-03-04T07:24:50.693Z
Updated: 2026-03-05T05:59:25.113Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.