Findings

CVE-2026-29125

IDC SFX2100 Satalite Recievers set the file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitat…

Published Mar 5, 2026 · updated Jun 17, 2026 · datacast sfx2100 firmware

IDC SFX2100 Satalite Recievers set the file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-middle attacks, and cause denial of service.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 5, 2026 · NIST NVD

    Detected

    IDC SFX2100 Satalite Recievers set the file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-middle attacks, and cause denial of service.

  2. Jun 17, 2026 · NIST NVD

    Updated

    IDC SFX2100 Satalite Recievers set the file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-middle attacks, and cause denial of service.

Affected

  • cpe datacast/sfx2100 firmwareversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-29125

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-29125

    IDC SFX2100 Satalite Recievers set the file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-middle attacks, and cause denial of service.

    nvd.nist.gov

References