CVE-2026-28777

Name of the Vulnerable Software and Affected Versions International Datacasting Corporation (IDC) SFX2100 Satellite Receiver (affected versions not specified)

Description The SFX2100 Satellite Receiver has a default, easily guessable password for the user (usr) account. An unauthenticated remote attacker can exploit this to gain unauthorized SSH access to the system. Initially, access is limited to a restricted shell, but an attacker can easily obtain a fully interactive shell by spawning a pseudo-terminal (pty). The user account allows access to the system.

Recommendations Change the default password for the user (usr) account to a strong, unique password.