The SFX2100 Satellite Receiver exposes a critical configuration file, /etc/resolv.conf, with world‑write permissions. This flaw permits any local user to overwrite the file, thereby controlling the DNS resolver settings. Such manipulation can redirect network traffic to malicious destinations, facilitate man‑in‑the‑middle attacks, or cause denial of service by disrupting DNS resolution.

International Datacasting Corporation’s SFX2100 Satellite Receiver is affected. The vulnerability is present in firmware revisions that leave /etc/resolv.conf world‑writable; specific version ranges are not disclosed.

The CVSS base score of 7.1 indicates high severity, while the EPSS < 1% reflects a very low current exploitation probability. The flaw is not listed in CISA’s KEV catalog, suggesting no publicly known exploit at this time. Attackers would need local access to the device to modify the file, implying a local‑only vector, yet the impact remains significant if achieved.