An authenticated information exposure vulnerability in ST Engineering iDirect VSAT terminals permits the retrieval of administrative password hashes, posing a critical risk of full device compromise.

The device configuration endpoint insecurely exposes sensitive data, including MD5-crypt password hashes for root SSH and web administration accounts, to any user with valid web credentials. This flaw (CWE-497) allows an attacker to perform offline brute-force attacks to recover cleartext credentials.

The exposure of administrative credentials directly facilitates unauthorized access to critical communication infrastructure. With a CVSS score of 8.1, the vulnerability represents a high risk, as it grants attackers the ability to escalate privileges and establish persistence on VSAT hardware. Successful exploitation could lead to total loss of device control, potential interception of satellite communications, and significant operational disruption.

Immediate Action: Update affected terminals to software version 4.5.3.0 or newer via the iDirect Support Portal.

Proactive Monitoring: Monitor management interface access logs for unusual patterns or repeated requests to configuration endpoints.

Compensating Controls: Restrict access to device management interfaces by placing them behind VPNs or utilizing Access Control Lists (ACLs) to ensure they are not exposed to the public internet.

Public Exploit Available: No — exploit_available (false).

This vulnerability presents a significant risk to the integrity of network hardware. Organizations must prioritize the deployment of firmware version 4.5.3.0 across all affected VSAT terminals. Until patching can be completed, ensure that management interfaces are strictly segmented from untrusted networks to prevent unauthorized access to the vulnerable API endpoint.