CVE-2026-29120 Details
Description
The /root/anaconda-ks.cfg installation configuration file in International Datacasting Corporation (IDC) SFX Series(SFX2100) SuperFlex Satellite Receiver insecurely stores the hardcoded root password hash. The password itself is highly insecure and susceptible to offline dictionary attacks using the rockyou.txt wordlist. Because direct root SSH login is disabled, an attacker must first obtain low-privileged access to the system (e.g., via other vulnerabilities) to be able to log in as the root user. The password is hardcoded and so allows for an actor with local access on effected versions to escalate to root
A vulnerability exists in the International Datacasting Corporation (IDC) SFX Series (SFX2100) SuperFlex Satellite Receiver due to the /root/anaconda-ks.cfg installation configuration file insecurely storing the hardcoded root password hash. This password is weak and can be cracked using offline dictionary attacks with the rockyou.txt wordlist. Although direct root SSH access is disabled, an attacker must first gain low-privileged access to the system through other vulnerabilities to log in as the root user. Once access is obtained, the hardcoded password allows for escalation to root privileges.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.abdulmhsblog.com/posts/sfx2100-vulns/ | Gridware | ExploitThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-798 | Use of Hard-coded Credentials | Gridware |
Affected Products
| Product | Versions |
|---|---|
| datacast sfx2100 firmware | All versions |
CPE
Remediation
| |
| datacast sfx2100 | All versions |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | Gridware |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 17, 2026 | Initial Analysis | [email protected] |
| Mar 5, 2026 | CVE Modified | Gridware |
| Mar 4, 2026 | New CVE Received | Gridware |