Security Advisory

CVE-2026-28777

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-03-04 07:41:29

Last updated 2026-03-05 05:58:56

Assigner Gridware

CVSS score 9.2

State PUBLISHED

Description

International Datacasting Corporation (IDC) SFX2100 Satellite Receiver, trivial password for the `user` (usr) account. A remote unauthenticated attacker can exploit this to gain unauthorized SSH access to the system, while intially dropped into a restricted shell, an attacker can trivially spawn a complete pty to gain an appropriately interactive shell.

← Browse all CVEs View on cve.org ↗