CVE-2025-67114

The record

Use of a deterministic credential generation algorithm in /ftl/bin/calc_f2 in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote attackers to derive valid administrative/root credentials from the device's MAC address, enabling authentication bypass and full device access.

Affected packages

Related vulnerabilities

• CVE-2026-79679 Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used… CWE-1391
• CVE-2026-66409 DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi… CWE-1391
• CVE-2026-66408 The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak… CWE-1391
• CVE-2026-57473 A vulnerability exists in the netclient and factory services of Reolink Home Hub… CWE-1391
• CVE-2026-47325 ProjectsAndPrograms school-management-system uses predictable credentials by generating… CWE-1391
• CVE-2026-4377 Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does… CWE-1391
• CVE-2026-35089 In Slican telephone exchanges secure key is generated in a predictable manner using… CWE-1391
• CVE-2026-45363 ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351 CWE-1391