CVE-2026-29128 is a maximum severity flaw (CVSS 10.0 in NVD) in the International Datacasting SFX2100 satellite receiver. Routing daemon configuration files are readable by every local user and hold hardcoded plaintext passwords. The record names no fixed firmware, so limit access to the units and ask the vendor for guidance.
What's affected
The NVD record names the IDC SFX2100 receiver and its firmware without a version range or a fix. It lists configuration files for the zebra, bgpd, ospfd and ripd routing components, owned by root but world-readable, which contain hardcoded or otherwise insecure plaintext passwords, including privileged mode credentials.
Assume all units are affected until the vendor says otherwise.
How to check if you're exposed
List the SFX2100 units you operate and where they sit on the network. Check which accounts can sign in to them, since the issue needs a way to read files on the device. Ask who has shell access and through what service. If your policy allows, a vendor-approved review of the file permissions on a test unit will show whether the routing daemon configs are readable by non-root users. Also check whether routing credentials on these units are reused elsewhere in your network.
What to do now
- Restrict network access to the receivers to a small trusted management network.
- Disable unused remote access services on the units, and block them at the firewall.
- Change any routing passwords you can, and make sure the same passwords are not used on other devices.
- Contact International Datacasting for firmware guidance, because the record names no fix.
- Treat routing credentials stored on these devices as exposed and rotate them where you reuse them.
Why it matters
The record files this under CWE-522, insufficiently protected credentials, and CWE-798, hardcoded credentials. Two problems combine here. The passwords are the same on every unit, and the files that hold them can be read by any local account. A person who gets even a low privilege foothold can read them and use them against the routing components and other systems that share the credentials.
The record describes the risk as reaching other systems in the network and gaining a foothold on the receiver. The 10.0 score reflects a changed scope in the vector. Credential reuse is the real danger, so the lasting fix is to make sure these passwords open nothing else. The record does not mark this as exploited in the wild.
Quick check
Why is the score 10.0?
The NVD vector rates network access, no privileges and a changed scope, because the credentials can open other systems.
Is there a patch?
The record names none. Ask the vendor.
Sources
Last reviewed: 19 October 2026.
