CVE-2026-28777

Impact

International Datacasting Corporation (IDC) SFX2100 Satellite Receiver, trivial password for the `user` (usr) account. A remote unauthenticated attacker can exploit this to gain unauthorized SSH access to the system, while intially dropped into a restricted shell, an attacker can trivially spawn a complete pty to gain an appropriately interactive shell.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://www.abdulmhsblog.com/posts/sfx2100-vulns/