CVE-2026-29124

HIGH

International Data Casting SFX2100 Satellite Receiver - Local Privilege Escalation via SUID Binaries

Title source: llm
STIX 2.1

Description

Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpack2 in International Data Casting (IDC) SFX2100 Satellite Receiver, which may lead to local privlidge escalation from the `monitor` user to root

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0012
EPSS Percentile 2.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-269
Status published
Products (1)
datacast/sfx2100_firmware
Published Mar 05, 2026
Tracked Since Mar 05, 2026