CVE-2025-67115 in SCE4255W
Summary
by MITRE • 03/19/2026
A path traversal vulnerability in /ftl/web/setup.cgi in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote authenticated users to read arbitrary files from the filesystem via crafted values in the log_type parameter to /logsave.htm.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 03/24/2026
This vulnerability represents a critical path traversal flaw in the Small Cell Sercomm SCE4255W device firmware, specifically affecting the web interface component at /ftl/web/setup.cgi. The issue manifests when processing the log_type parameter within the /logsave.htm endpoint, allowing authenticated attackers to manipulate file system access through carefully crafted input values. The vulnerability exists due to insufficient input validation and sanitization of user-supplied parameters that directly influence file system operations. Attackers can exploit this weakness to access sensitive system files, configuration data, and potentially system logs that should remain restricted to authorized administrative users. This represents a significant security risk as it enables unauthorized information disclosure from the device's underlying file system.
The technical implementation of this vulnerability stems from improper handling of the log_type parameter which likely constructs file paths without adequate validation or sanitization. When an authenticated user submits malicious input through this parameter, the application processes the request without sufficient checks to prevent directory traversal sequences such as ../ or similar path manipulation techniques. This flaw allows attackers to navigate outside the intended directory structure and access arbitrary files on the device's file system. The vulnerability specifically affects firmware versions prior to DG3934v3@2308041842, indicating this was a known issue that required a firmware update to resolve. The authentication requirement means that attackers must first establish valid credentials, but once authenticated, they can leverage this path traversal to escalate their access privileges and extract sensitive information.
The operational impact of this vulnerability extends beyond simple information disclosure, as it provides attackers with access to potentially sensitive device configuration files, system logs, and other administrative data that could be used for further exploitation. This information could reveal network configurations, user credentials, device identifiers, and other system details that would aid in targeting additional devices or conducting advanced persistent threats. The vulnerability affects the FreedomFi Englewood deployment, suggesting it could impact a significant number of devices in the field, particularly in enterprise or residential network environments where these small cell devices serve as critical infrastructure components. The path traversal nature of the flaw means that attackers could potentially access not just log files but also configuration files, binary executables, and other system resources that may contain sensitive information or provide attack vectors for privilege escalation.
Mitigation strategies for this vulnerability should focus on implementing proper input validation and sanitization techniques to prevent path traversal attacks. Device administrators should immediately upgrade to firmware version DG3934v3@2308041842 or later, which contains the necessary patches to address this issue. Additionally, network segmentation and access control measures should be implemented to limit the attack surface and reduce the impact of potential exploitation. Security monitoring should be enhanced to detect unusual access patterns or attempts to access system files through the web interface. The vulnerability aligns with CWE-22 Path Traversal and ATT&CK technique T1213 Data from Information Repositories, highlighting the need for comprehensive security controls including proper parameter validation, access controls, and regular firmware updates. Organizations should also consider implementing web application firewalls and intrusion detection systems to help identify and block exploitation attempts targeting this specific vulnerability.