PT-2026-26319 · Sercomm+1 · Sercomm Sce4255W+1

Published 2026-03-19 · Updated 2026-03-23 · CVE-2025-67114

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Small Cell Sercomm SCE4255W (FreedomFi Englewood) versions prior to DG3934v3@2308041842

Description A deterministic credential generation algorithm in /ftl/bin/calc f2 allows remote attackers to derive valid administrative and root credentials from the device's MAC address. This enables authentication bypass and full device access. The affected component is the calc f2 function located at the /ftl/bin/ path.

Recommendations Update to version DG3934v3@2308041842 or later.

Fix

Weakness Enumeration

CWE-1391

Related Identifiers

CVE-2025-67114

Affected Products

Freedomfi Englewood

Sercomm Sce4255W

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-67114 · Security Note
• https://fcc.report/FCC-ID/P27-SCE4255W/4790935.pdf · Note
• https://neroteam.com/blog/freedomfi-sercomm-sce4255w-englewood · Note
• https://twitter.com/CVEnew/status/2036024247383118332 · Twitter Post
• https://freedomfi.com/index.html · Note