CVE-2026-28775

The device by default configures the community string 'private' with read and write access to the SNMP service, requiring no authentication beyond knowledge of this string. The SNMP agent runs with root privileges, and the device uses a vulnerable version of the net-snmp library older than 5.8. Attacker can exploit NET-SNMP-EXTEND-MIB directives to inject and execute arbitrary operating system commands via the SNMP protocol.

Attacker gains full control over the device with root privileges, allowing execution of arbitrary system commands, modification of configuration, installation of malicious software, or violation of confidentiality and integrity of satellite transmission.

Patches available from the manufacturer should be applied according to references. As immediate actions, it is recommended to: change the default community string 'private' to a unique and strong string, restrict access to the SNMP service only to trusted IP addresses using ACL or firewall, disable the SNMP service if not required, and update the net-snmp library to version 5.8 or newer.

Firmware software of Datacast SFX2100 devices (IDC SFX Series SuperFlex Satellite Receiver) using vulnerable net-snmp version older than 5.8 with default community string 'private' configuration