Executive Summary

This vulnerability affects the IDC SFX2100 Satellite Receiver firmware, which includes multiple daemon configuration files for routing components such as zebra, bgpd, ospfd, and ripd. These configuration files are owned by root but are world-readable, meaning any user can read them. The files contain hardcoded or insecure plaintext passwords, including privileged-mode credentials. A remote attacker can exploit these reused or hardcoded credentials to gain unauthorized access to other systems on the network, establish a foothold on the satellite receiver, or potentially escalate privileges locally.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unauthorized access to network systems by allowing a remote attacker to abuse hardcoded or reused plaintext passwords found in configuration files. This can result in the attacker gaining control over the satellite receiver device, moving laterally within the network to access other systems, and potentially escalating their privileges locally. Such impacts can compromise the confidentiality, integrity, and availability of network resources.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

I don't know

Useful 0 Not Useful 0

Mitigation Strategies

I don't know

Useful 0 Not Useful 0