What is the CVSS score of CVE-2026-29122?

CVE-2026-29122 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Sfx2100 Firmware are affected by CVE-2026-29122?

CVE-2026-29122 presents moderate security risk, a improper privilege management vulnerability rated CVSS 5.5. Attackers could gain access beyond their authorized level.

Is there a public PoC exploit available for CVE-2026-29122?

Yes, a public proof-of-concept exploit is available for CVE-2026-29122. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-29122?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Sfx2100 Firmware CVE-2026-29122

MEDIUM

Improper Privilege Management (CWE-269)

2026-03-05 b7efe717-a805-47cf-8e9a-921fca0ce0ce

Privilege Escalation Sfx2100 Firmware

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

PoC Detected

Mar 11, 2026 - 18:35 vuln.today

Public exploit code

CVE Published

Mar 05, 2026 - 02:16 nvd

MEDIUM 5.5

DescriptionCVE.org

International Data Casting (IDC) SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file reads as the root user on the local file system. This allows an actor to be able to read any root read-only files, such as the /etc/shadow file or other configuration/secrets carrier files.

AnalysisAI

Privileged file disclosure in IDC SFX2100 satellite receiver firmware results from a setuid-enabled date binary that allows local users to read root-owned files including /etc/shadow and other sensitive configuration data. A local attacker can leverage publicly available exploit techniques to gain unauthorized access to confidential system information. Public exploit code exists for this vulnerability, though no patch is currently available.

Technical ContextAI

Classified as CWE-269 (Improper Privilege Management). Affects Sfx2100 Firmware. International Data Casting (IDC) SFX2100 satellite receiver comes with the /bin/date utility installed with the setuid bit set. This configuration grants elevated privileges to any local user who can execute the binary. A local actor is able to use the GTFObins resource to preform privileged file reads as the root user on the local file system. This allows an actor to be able to read any root read-only files, such as the /etc/shadow file or other configuration/secrets carrier files.