CVE-2026-29127
CVE-2026-29127
9.2
CriticalPublished:
Last updated:
Source:b7efe717-a805-47cf-8e9a-921fca0ce0ce
Analyzed
CVSS Vector
v4.0- Attack Vector
- Local
- Attack Complexity
- Low
- Attack Requirements
- None
- Privileges Required
- Low
- User Interaction
- None
- Confidentiality (Vulnerable)
- High
- Integrity (Vulnerable)
- High
- Availability (Vulnerable)
- None
- Confidentiality (Subsequent)
- High
- Integrity (Subsequent)
- High
- Availability (Subsequent)
- None
Description
The IDC SFX2100 Satellite Receiver sets overly permissive file system permissions on the monitor user's home directory. The directory is configured with permissions 0777, granting read, write, and execute access to all local users on the system, which may cause local privilege escalation depending on conditions of the system due to the presence of highly privileged processes and binaries residing within the affected directory.
References
b7efe717-a805-47cf-8e9a-921fca0ce0ce
https://www.abdulmhsblog.com/posts/sfx2100-vulns/134c704f-9b21-4f2e-91b3-4a467353bcc0
https://www.abdulmhsblog.com/posts/sfx2100-vulns/