CVE-2025-67114
CVE-2025-67114
In short
The device generates admin passwords using a predictable formula based on its MAC address, which attackers can easily calculate. This lets anyone gain full control of the device remotely without knowing the real password.
Technical detail
CVE-2025-67114 exploits a deterministic credential generation algorithm in /ftl/bin/calc_f2 that derives administrative credentials directly from the device's MAC address. An unauthenticated remote attacker can reverse-engineer valid root credentials, bypassing authentication and achieving complete device compromise. The vulnerability affects Sercomm SCE4255W (FreedomFi Englewood) devices running firmware before DG3934v3@2308041842.
Summary generated and translated by AI from the official description.
Use of a deterministic credential generation algorithm in /ftl/bin/calc_f2 in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote attackers to derive valid administrative/root credentials from the device's MAC address, enabling authentication bypass and full device access.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →