Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IDC SFX2100 Satellite Receiver firmware ships with multiple daemon configuration files for routing components (e.g., zebra, bgpd, ospfd, and ripd) that are owned by root but world-readable. The configuration files (e.g., zebra.conf, bgpd.conf, ospfd.conf, ripd.conf) contain hardcoded or otherwise insecure plaintext passwords (including “enable”/privileged-mode credentials). A remote actor is able to abuse the reuse/hardcoded nature of these credentials to further access other systems in the network, gain a foothold on the satellite receiver or potentially locally privilege escalate.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-05 | 1 | Disclosure1 |
| 2026-03-08 | 1 | General1 |
CVE-2026-29128 IDC SFX2100 Satellite Receiver firmware ships with multiple daemon configuration files for routing components (e.g., zebra, bgpd, ospfd, and ripd) that are owned by r… https://www.cve.org/CVERecord?id=CVE-2026-29128
Post summary
The text briefly references CVE-2026-29128 and notes a firmware issue involving routing daemon configuration files, but it provides no PoC, exploit, active exploitation claim, or patch information.
CVE-2026-29128 Hardcoded Credentials Exposure in IDC SFX2100 Satellite Receiver Firmware https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29128
Post summary
The entry announces CVE‑2026‑29128, detailing hardcoded credential exposure in IDC SFX2100 firmware, with no PoC, exploit, or patch information provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | datacast | sfx2100 | - | - | - |
| OS | datacast | sfx2100_firmware | - | - | - |