A directory used by the monitor user on the IDC SFX2100 Satellite Receiver is set to 0777, which allows any local user to read, write, and execute files within that directory. Because the directory contains binaries with the set‑uid bit set to root, a local attacker can exploit the permissive access to gain root privileges. This flaw falls under class CWE‑269 (Improper Privilege Management) and CWE‑863 (CWE‑269 Privilege Management) and can result in the ability to modify system binaries, install malware, or alter firmware settings.

The vulnerability affects devices manufactured by International Datacasting Corporation, specifically the SFX2100 Satellite Receiver. No specific firmware revisions are listed, and the CPE identifiers indicate the scope is the hardware and its firmware.

The CVSS score of 9.2 indicates critical severity, while the EPSS score of less than 1 % demonstrates a very low but nonzero likelihood of exploitation. The vulnerability is not yet listed in the CISA Known Exploited Vulnerabilities catalog. As the flaw requires local physical or administrative access to the receiver, attackers would normally need to log in as a non‑privileged user or otherwise have local access. Once access is achieved, the attacker can replace or modify SUID root binaries in the monitor home directory, effectively elevating privileges to system‑wide control.