St Engineering Idirect 3315-Series Terminals
3 CVEs affecting St Engineering Idirect 3315-Series Terminals. Latest disclosed: 2026-09-11. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-38056 | High | 8.8 | 2026-09-11 | A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0.1.0. The iQ200 is a rackmount satellite modem deploy… |
CVE-2026-38057 | High | 8.1 | 2026-07-10 | The iDirect iQ200 does not validate CSRF tokens on state-changing API endpoints after authentication. The /api/reboot endpoint accepts POST requests authentica… |
CVE-2026-38059 | High | 7.5 | 2026-07-10 | The iDirect iQ200 exposes the /api/identity and /api/ REST API endpoints without authentication. An unauthenticated attacker with network access can retrieve s… |