Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Unauthenticated RCE via SNMP Default Writable Community String
Vulnerability Description
An unauthenticated Remote Code Execution (RCE) vulnerability exists in the SNMP service of International Datacasting Corporation (IDC) SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the `private` SNMP community string with read/write access by default. Because the SNMP agent runs as root, an unauthenticated remote attacker can utilize `NET-SNMP-EXTEND-MIB` directives, abusing the fact that the system runs a vulnerable version of net-snmp pre 5.8, to execute arbitrary operating system commands with root privileges.
CVSS Information
N/A
Vulnerability Type
不安全的默认资源初始化
Vulnerability Title
International Datacasting SFX2100 SuperFlex Satellite Receiver 安全漏洞
Vulnerability Description
International Datacasting Corporation International Datacasting SFX2100 SuperFlex Satellite Receiver是美国International Datacasting Corporation公司的一个专业广播级卫星信号接收设备。 International Datacasting SFX2100 SuperFlex Satellite Receiver存在安全漏洞,该漏洞源于SNMP服务不安全地配置了具有读写权限的私
CVSS Information
N/A
Vulnerability Type
N/A