CVE-2026-29128
Hardcoded Passwords in IDC SFX2100 Daemon Configs Enable Remote Access
Publication date: 2026-03-05
Last updated on: 2026-03-09
Assigner: Gridware
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| datacast | sfx2100_firmware | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-522 | The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. |
| CWE-798 | The product contains hard-coded credentials, such as a password or cryptographic key. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability affects the IDC SFX2100 Satellite Receiver firmware, which includes multiple daemon configuration files for routing components such as zebra, bgpd, ospfd, and ripd. These configuration files are owned by root but are world-readable, meaning any user can read them. The files contain hardcoded or insecure plaintext passwords, including privileged-mode credentials. A remote attacker can exploit these reused or hardcoded credentials to gain unauthorized access to other systems on the network, establish a foothold on the satellite receiver, or potentially escalate privileges locally.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access to network systems by allowing a remote attacker to abuse hardcoded or reused plaintext passwords found in configuration files. This can result in the attacker gaining control over the satellite receiver device, moving laterally within the network to access other systems, and potentially escalating their privileges locally. Such impacts can compromise the confidentiality, integrity, and availability of network resources.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
What immediate steps should I take to mitigate this vulnerability?
I don't know