CVE-2026-29119CWE-798

Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver

High · published March 4, 2026

CVSS v4.0
8.8
EPSS
1%
Percentile
51.2
In the wild
Unconfirmed
What it is

International Datacasting Corporation (IDC) SFX Series SuperFlex(SFX2100) SatelliteReceiver contains hardcoded and insecure credentials for the `admin` account. A remote unauthenticated attacker can use these undocumented credentials to access the satellite system directly via the Telnet service, leading to potential system compromise.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L
EPSS
0.00664 · 51.2th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-03-04T07:58Z
EPSS history
Timeline
  • 04 MAR 07:58Z
    Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver
    cvelistv5