CVE-2025-67114criticalCWE-1391

CVE-2025-67114

Published · Updated

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.8epss 0.5%
In short

The device generates admin passwords using a predictable formula based on its MAC address, which attackers can easily calculate. This lets anyone gain full control of the device remotely without knowing the real password.

Technical detail

CVE-2025-67114 exploits a deterministic credential generation algorithm in /ftl/bin/calc_f2 that derives administrative credentials directly from the device's MAC address. An unauthenticated remote attacker can reverse-engineer valid root credentials, bypassing authentication and achieving complete device compromise. The vulnerability affects Sercomm SCE4255W (FreedomFi Englewood) devices running firmware before DG3934v3@2308041842.

Summary generated and translated by AI from the official description.
Use of a deterministic credential generation algorithm in /ftl/bin/calc_f2 in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote attackers to derive valid administrative/root credentials from the device's MAC address, enabling authentication bypass and full device access.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a