Paper/Archive/CVE-2026-29119

CVE-2026-29119

International Datacasting Corporation (IDC) SFX2100 Series SuperFlex SatelliteReceiver — Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver

EPSS 0.6%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 46.2.462 × 209.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded and insecure credentials for the `admin` account. A remote unauthenticated attacker can use these undocumented credentials to access the satellite system directly via the Telnet service, leading to potential system compromise.

Affected

ProductAffectedFixed inSource

SFX2100 Series SuperFlex SatelliteReceiverSFX2100–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Gridware (CNA)8.8CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refabdulmhsblog.com/posts/sfx2100-vulns