CVE-2026-38058

High8.1Published on September 11, 2026

The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid web credentials can extract these hashes and crack them offline using commodity hardware.

CVSS score8.1 / 10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness type (CWE)CWE-497

Vulnerabilities

CISA Expands iDirect Satellite Terminal Warning With Critical Privilege-Escalation Flaw

CISA expanded its iDirect advisory with two new flaws exposing credential hashes and enabling critical local privilege escalation on satellite terminals.

Sep 13, 202615:506 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

CISA Expands iDirect Satellite Terminal Warning With Critical Privilege-Escalation Flaw