CVE-2026-29125

IDC SFX2100 Satellite Receiver allows unprivileged modification of DNS configuration due to world-writable `/etc/resolv.conf`

View on CVE.org

Published Mar 5, 2026 CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Description

IDC SFX2100 Satalite Recievers set the `/etc/resolv.conf` file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-middle attacks, and cause denial of service.

Analysis

Technical impact

The SFX2100 Satellite Receiver exposes a critical configuration file, /etc/resolv.conf, with world‑write permissions. This flaw permits any local user to overwrite the file, thereby controlling the DNS resolver settings. Such manipulation can redirect network traffic to malicious destinations, facilitate man‑in‑the‑middle attacks, or cause denial of service by disrupting DNS resolution.

Affected Systems

International Datacasting Corporation’s SFX2100 Satellite Receiver is affected. The vulnerability is present in firmware revisions that leave /etc/resolv.conf world‑writable; specific version ranges are not disclosed.

Risk and Exploitability

The CVSS base score of 7.1 indicates high severity, while the EPSS < 1% reflects a very low current exploitation probability. The flaw is not listed in CISA’s KEV catalog, suggesting no publicly known exploit at this time. Attackers would need local access to the device to modify the file, implying a local‑only vector, yet the impact remains significant if achieved.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

International Datacasting Corporation

SFX2100 Satellite Receiver

affected

Version	Status	Constraints
`SFX2100`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:datacast:sfx2100_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:datacast:sfx2100:-:*:*:*:*:*:*:*

No data.

Vendor Product Versions

International Datacasting Corporation

Sfx2100 Satellite Receiver

Version	Status	Scheme	Platform
`SFX2100`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Change the permissions on /etc/resolv.conf to allow writes only by the root user (e.g., chmod 644 or 640).
Restart or reload the networking or DNS resolver service to ensure the new permissions and configuration are active.
Apply any firmware update from International Datacasting Corporation that removes the world‑write permission on /etc/resolv.conf; if no update is available, consider restricting local user access or physically securing the device.

Generated by OpenCVE AI on April 16, 2026 at 12:59 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Local

Attack Complexity High

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact Low

Subsequent System Integrity Impact Low

Subsequent System Availability Impact High

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.120% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://www.abdulmhsblog.com/posts/sfx2100-vulns/

History

Mar 11, 2026 6:45 PM First appearance in the feed. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Datacast Datacast sfx2100 Datacast sfx2100 Firmware
CPEs		cpe:2.3:h:datacast:sfx2100:-:::::::* cpe:2.3:o:datacast:sfx2100_firmware:-:::::::*
Vendors & Products		Datacast Datacast sfx2100 Datacast sfx2100 Firmware
Metrics		cvssV3_1 `{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'}`

Mar 6, 2026 3:30 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		International Datacasting Corporation International Datacasting Corporation sfx2100 Satellite Receiver
Vendors & Products		International Datacasting Corporation International Datacasting Corporation sfx2100 Satellite Receiver

Mar 5, 2026 5:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mar 5, 2026 6:30 AM References updated View changes

Type	Values Removed	Values Added
References	https://www.abdulmhsblog.com/posts/spfx-vulnrabilities/

Mar 5, 2026 6:15 AM Added references View changes

Type	Values Removed	Values Added
References		https://www.abdulmhsblog.com/posts/sfx2100-vulns/

Mar 5, 2026 2:15 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		IDC SFX2100 Satalite Recievers set the `/etc/resolv.conf` file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-middle attacks, and cause denial of service.
Title		IDC SFX2100 Satellite Receiver allows unprivileged modification of DNS configuration due to world-writable `/etc/resolv.conf`
Weaknesses		CWE-732
References		https://www.abdulmhsblog.com/posts/spfx-vulnrabilities/
Metrics		cvssV4_0 `{'score': 7.1, 'vector': 'CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H'}`