VYPR
Unrated severityNVD Advisory· Published Mar 19, 2026· Updated Mar 24, 2026

CVE-2025-67115

CVE-2025-67115

Description

A path traversal vulnerability in /ftl/web/setup.cgi in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote authenticated users to read arbitrary files from the filesystem via crafted values in the log_type parameter to /logsave.htm.

Affected products

2
  • Sercomm/Small Cell Sercomm SCE4255Wdescription
  • Sercomm/SCE4255Wllm-fuzzy
    Range: < DG3934v3@2308041842

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.