PT-2026-26319 · Sercomm+1 · Sercomm Sce4255W+1

CVE-2025-67114 · Publicado 2026-03-19 · Atualizado 2026-03-23

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Small Cell Sercomm SCE4255W (FreedomFi Englewood) versions prior to DG3934v3@2308041842

Description A deterministic credential generation algorithm in /ftl/bin/calc f2 allows remote attackers to derive valid administrative and root credentials from the device's MAC address. This enables authentication bypass and full device access. The affected component is the calc f2 function located at the /ftl/bin/ path.

Recommendations Update to version DG3934v3@2308041842 or later.

Correção

Enumeração de Fraquezas

CWE-1391

Identificadores relacionados

CVE-2025-67114

Produtos afetados

Freedomfi Englewood

Sercomm Sce4255W

Referências · 5

• https://fcc.report/FCC-ID/P27-SCE4255W/4790935.pdf · Nota
• https://neroteam.com/blog/freedomfi-sercomm-sce4255w-englewood · Nota
• https://twitter.com/CVEnew/status/2036024247383118332 · Publicação no Twitter
• https://freedomfi.com/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-67114 · Nota de Segurança