Vulnerability Description
IDC SFX2100 Satalite Recievers set the `/etc/resolv.conf` file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-middle attacks, and cause denial of service.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Datacast | Sfx2100 Firmware | - |
| Datacast | Sfx2100 | - |
Related Weaknesses (CWE)
References
- https://www.abdulmhsblog.com/posts/sfx2100-vulns/ExploitThird Party Advisory
FAQ
What is CVE-2026-29125?
CVE-2026-29125 is a vulnerability with a CVSS score of 4.7 (MEDIUM). IDC SFX2100 Satalite Recievers set the `/etc/resolv.conf` file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-m...
How severe is CVE-2026-29125?
CVE-2026-29125 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-29125?
Check the references section above for vendor advisories and patch information. Affected products include: Datacast Sfx2100 Firmware, Datacast Sfx2100.