CVE-2026-29125CWE-732

IDC SFX2100 Satellite Receiver allows unprivileged modification of DNS configuration due to world-writable `/etc/resolv.conf`

High · published March 5, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

IDC SFX2100 Satalite Recievers set the `/etc/resolv.conf` file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-middle attacks, and cause denial of service.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H
EPSS
0.00116 · 1.5th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2026-03-05T01:38Z
EPSS history
Timeline
  • 05 MAR 01:38Z
    IDC SFX2100 Satellite Receiver allows unprivileged modification of DNS configuration due to world-writable `/etc/resolv.conf`
    cvelistv5