CVE-2026-29127

The home directory of the 'monitor' user is configured with 0777 permissions, which means full access (read, write, execute) for all local system users. Highly privileged processes or binary files reside in this directory. A local attacker without elevated privileges can overwrite or plant a malicious file in this directory and then wait for it to be executed by a privileged process, thereby gaining higher privileges in the system.

A local attacker can escalate their privileges in the system by manipulating files in a directory with overly permissive permissions, potentially gaining control over privileged processes or the entire device.

Apply patches available from the manufacturer according to the references. Until updates are available, it is recommended to manually change the permissions of the 'monitor' user's home directory to more restrictive settings (e.g., 0750 or 0700) and restrict local system access to trusted users only.

Datacast SFX2100 (IDC SFX2100 Satellite Receiver) device firmware; specific firmware versions indicated in the manufacturer's references.