CVE-2026-29126 in IDC SFX2100 SuperFlex Satellite Receiver
要約
〜によって MITRE • 2026年03月05日
Incorrect permission assignment (world-writable file) in /etc/udhcpc/default.script in International Data Casting (IDC) SFX2100 Satellite Receiver allows a local unprivileged attacker to potentially execute arbitrary commands with root privileges (local privilege escalation and persistence) via modification of a root-owned, world-writable BusyBox udhcpc DHCP event script, which is executed when a DHCP lease is obtained, renewed, or lost.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.