International Datacasting SuperFlex Satellite Receiver Hardcoded Credentials Vulnerability Allowing SSH Access

A vulnerability exists in the International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver due to hardcoded credentials for the 'monitor' account. These undocumented credentials allow remote, unauthenticated attackers to access the system via SSH. Although the access is initially limited to a restricted shell, attackers can easily escape this limitation to gain full shell access.

Impact

Exploitation of this vulnerability allows for unauthorized SSH access to the affected system, with the ability to escalate from a restricted shell to full shell access.