Log in Start free

International Datacasting Corporation (IDC)

Products

ProductCVEsExploitedLatest
SFX Series SuperFlex Satellite Receiver Web Management Interface3–Mar 4, 2026
SFX Series SuperFlex SatelliteReceiver Web Management Interface3–Mar 4, 2026
IDC SFX2100 SuperFlex Satellite Receiver2–Mar 4, 2026
SFX2100 Series SuperFlex SatelliteReceiver2–Mar 4, 2026
SFX2100 Satellite Receiver1–Mar 4, 2026

Exploited and recent CVEs

  • CVE-2026-29119 High 8.8 Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver 0.6%
  • CVE-2026-28778 High 7.9 Hardcoded FTP Credentials and LPE(via Insecure Permissions) for `xd` Local Account on IDC SFX2100 0.9%
  • CVE-2026-28777 Critical 9.2 Hardcoded and Insecure Credentials for "User" Local Account with SSH Access On IDC SFX2100 Satellite Receiver 0.6%
  • CVE-2026-28776 High 7.8 Hardcoded and Insecure Credentials for "monitor" account with SSH Access On IDC SFX2100 Satellite Receiver 0.6%
  • CVE-2026-28775 Critical 10.0 Unauthenticated RCE via SNMP Default Writable Community String 1.2%
  • CVE-2026-28774 Critical 9.3 Authenticated OS Command Injection via Traceroute Utility leads to Root RCE 2.8%
  • CVE-2026-28773 Critical 9.3 Authenticated OS Command Injection via Ping Utility Leading to RCE as Root 2.4%
  • CVE-2026-28772 Medium 5.1 Reflected XSS in IDC_Logging Index endpoint 0.2%
  • CVE-2026-28771 Medium 5.1 Reflected XSS In /index.cgi Endpoint On IDC Satellite Receiver Web Management Interface Version 101 0.2%
  • CVE-2026-28770 Medium 5.3 XML injection In /IDC_Logging/checkifdone.cgi Endpoint On IDC SFX Web Management Interface Version 101 0.4%
  • CVE-2026-28769 Medium 5.3 LFI in /IDC_Logging/checkifdone.cgi, "file" parameter Allowing for File Existence Enumeration On IDC Satellite Receiver Web Management Interface Version 101 0.7%