# CVE-2026-29128

## Summary

- **CVE ID:** CVE-2026-29128
- **Severity:** HIGH
- **CVSS Score:** 8.6 (CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N)
- **CWE:** CWE-798, CWE-522
- **Published:** Mar 5, 2026
- **Last Modified:** Mar 12, 2026

## Description

IDC SFX2100 Satellite Receiver firmware ships with multiple daemon configuration files for routing components (e.g., zebra, bgpd, ospfd, and ripd) that are owned by root but world-readable. The configuration files (e.g., zebra.conf, bgpd.conf, ospfd.conf, ripd.conf) contain hardcoded or otherwise insecure plaintext passwords (including “enable”/privileged-mode credentials). A remote actor is able to abuse the reuse/hardcoded nature of these credentials to further access other systems in the network, gain a foothold on the satellite receiver or potentially locally privilege escalate.

## Affected Products

- International Datacasting Corporation — SFX2100 Satellite Receiver (SFX2100)

## References

- [CNA](https://www.abdulmhsblog.com/posts/sfx2100-vulns/)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.28%
- **EPSS Percentile:** 20.2

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._