Skip to content
OpenAdvisories
High · 8.8 CVE-2026-29119 EUVD-2026-9374GHSA-rjp8-hm8p-5c9x

Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver

Published Mar 4, 2026 · Updated Mar 5, 2026 · Assigned by Gridware

Description

International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded and insecure credentials for the `admin` account. A remote unauthenticated attacker can use these undocumented credentials to access the satellite system directly via the Telnet service, leading to potential system compromise.

Affected products

VendorProductAffectedFixed
International Datacasting Corporation (IDC) SFX2100 Series SuperFlex SatelliteReceiver SFX2100 —

References