Description
International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver contains hardcoded credentials for the `monitor` account. A remote unauthenticated attacker can use these trivial, undocumented credentials to access the system via SSH. While initially dropped into a restricted shell, the attacker can trivially break out to achieve standard shell functionality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| International Datacasting Corporation (IDC) | IDC SFX2100 SuperFlex Satellite Receiver | SFX2100 | — |