International Datacasting Corporation SFX2100 Satellite Receiver Trivial Password Vulnerability Allowing Unauthorized SSH Access

A vulnerability exists in the International Datacasting Corporation (IDC) SFX2100 Satellite Receiver due to a trivial password for the 'user' (usr) account. This flaw allows remote, unauthenticated attackers to gain unauthorized SSH access to the system. Although initially placed in a restricted shell, an attacker can easily spawn a full pseudo-terminal to obtain an interactive shell.

Impact

Exploitation of this vulnerability leads to unauthorized SSH access, allowing an attacker to execute commands on the system with the privileges of the 'user' account.