IDC SFX2100 Satellite Receivers allow DNS tampering and man-in-the-middle attacks

Summary

The IDC SFX2100 Satellite Receivers set a critical system file to be accessible to anyone with local access, which can be exploited to intercept and manipulate network communications, potentially leading to unauthorized access or disruption of service. This issue affects the security of data transmitted over the network. To protect your network, ensure that only authorized users have access to this file.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
datacast	sfx2100_firmware	All versions	–

Original title

IDC SFX2100 Satalite Recievers set the `/etc/resolv.conf` file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-th...

Original description

IDC SFX2100 Satalite Recievers set the `/etc/resolv.conf` file to be world-writable by any local user, allowing DNS resolver tampering that can redirect network communications, facilitate man-in-the-middle attacks, and cause denial of service.

nvd CVSS4.0 7.1

Vulnerability type

CWE-732 Incorrect Permission Assignment for Critical Resource

https://www.abdulmhsblog.com/posts/sfx2100-vulns/