Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2026-28777

Hardcoded and Insecure Credentials for "User" Local Account with SSH Access On IDC SFX2100 Satellite Receiver

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Gridware

Description

International Datacasting Corporation (IDC) SFX2100 Satellite Receiver, trivial password for the `user` (usr) account. A remote unauthenticated attacker can exploit this to gain unauthorized SSH access to the system, while intially dropped into a restricted shell, an attacker can trivially spawn a complete pty to gain an appropriately interactive shell.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

International Datacasting Corporation (IDC) SFX2100 Satellite Receiver

Default version status: unaffected

  • SFX2100affected

References