SUID Binaries in International Data Casting SFX2100 Receiver

Summary

Multiple important system binaries in the International Data Casting SFX2100 Satellite Receiver have the wrong permissions, which could allow a malicious user to gain full control of the system. This is a serious issue because it could allow an attacker to access and modify sensitive system settings. To fix this, the receiver's administrators should review and correct the permissions on these binaries as soon as possible.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
datacast	sfx2100_firmware	All versions	–

Original title

Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpack2 in Internatio...

Original description

Multiple SUID root-owned binaries are found in /home/monitor/terminal, /home/monitor/kore-terminal, /home/monitor/IDE-DPack/terminal-dpack, and /home/monitor/IDE-DPack/terminal-dpack2 in International Data Casting (IDC) SFX2100 Satellite Receiver, which may lead to local privlidge escalation from the `monitor` user to root

nvd CVSS4.0 8.6

Vulnerability type

CWE-269 Improper Privilege Management

https://www.abdulmhsblog.com/posts/sfx2100-vulns/