World-Writable Configuration Flaw in IDC SFX2100 Satellite Receivers

CVE-2026-29125

What is CVE-2026-29125?

The IDC SFX2100 Satellite Receiver is vulnerable due to improper permissions set on its /etc/resolv.conf file, which is world-writable. This security gap allows any local user to alter DNS resolution settings, potentially leading to serious security implications. Attackers can redirect network traffic, execute man-in-the-middle attacks, and even disrupt service availability. Mitigating this vulnerability is crucial for ensuring the integrity and security of network communications.

References