SecAlerts
Datacast logo

Datacast

Security Risk Profile

47
/100
medium

Security Risk Score

Comprehensive risk assessment based on 20 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 4, 2026 to present

20
Total CVEs
17
Critical+High
0
Exploited
17
Unpatched

Threat Assessment

Avg CVSS
8.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
17
Critical/High
Risk Level
47/100
medium

Severity Distribution

Critical
10
High
7
Medium
3
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
20

Age Distribution

Common Weaknesses (CWE)

1
XSS
3
2
OS Command Injection
2
3
Command Injection
2
4
Path Traversal
1

Most Affected Products

1. Datacast Sfx2100 Firmware20
2. IDC SFX2100 Satellite Receiver3
3. International Data Casting SFX21003
4. International Datacasting Corporation SFX Series SuperFlex Satellite Receiver Web Management Interface3
5. International Datacasting Corporation SFX2100 Satellite Receiver2

Recent Vulnerabilities

See more →
CVE-2026-29128
CVSS 10.0EPSS 0%critical

IDC SFX2100 Satellite Receiver bgpd/ospfd/ripd/zebra Config Credential Disclosure via World-Readable Files

3/5/2026🔧 No Patch
CVE-2026-29127
CVSS 9.2EPSS 0%critical

Incorrect Permission Assignment(777) on `monitor` Users Home Directory Containing SUID Root Binaries in IDC SFX2100

3/5/2026🔧 No Patch
CVE-2026-29126
CVSS 8.5EPSS 0%high

World-Writable, Root Owned/Run `/etc/udhcpc/default.script` in IDC SFX2100 Satellite Receiver Leads To Potential LPE

3/5/2026🔧 No Patch
CVE-2026-29125
CVSS 7.1EPSS 0%high

IDC SFX2100 Satellite Receiver allows unprivileged modification of DNS configuration due to world-writable `/etc/resolv.conf`

3/5/2026🔧 No Patch
CVE-2026-29124
CVSS 8.6EPSS 0%high

Multiple SUID Root Binaries in `monitor` User Home Directory Leading to Potential Local Privilege Escalation

3/5/2026🔧 No Patch
CVE-2026-29123
CVSS 8.6EPSS 0%high

Multiple SUID Root Binaries in `xd` User Home Directory Leading to Potential Local Privilege Escalation

3/5/2026🔧 No Patch
CVE-2026-29122
CVSS 8.3EPSS 0%high

`/bin/date` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE

3/5/2026🔧 No Patch
CVE-2026-29121
CVSS 8.3EPSS 0%high

`/sbin/ip` Binary given SETUID Permissions on IDC SFX2100 Leading to Potential LPE

3/5/2026🔧 No Patch
CVE-2026-29120
CVSS 9.2EPSS 0%critical

Insecure, Hardcoded Root Password Stored in Anaconda Configuration File On IDC SFX2100 Satellite Receiver

3/4/2026🔧 No Patch
CVE-2026-29119
CVSS 9.8EPSS 0%critical

Hardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver

3/4/2026🔧 No Patch

Monitor Datacast in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.