CVE-2025-67115 in SCE4255W信息

摘要

由 VulDB • 2026-06-24

Small Cell Sercomm SCE4255W (FreedomFi Englewood) 固件在 DG3934v3@2308041842 版本之前，/ftl/web/setup.cgi 中存在路径遍历漏洞。远程经过身份验证的用户可通过向 /logsave.htm 发送包含精心构造的 log_type 参数的请求，读取文件系统中的任意文件。

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

MITRE

预定

2025-12-08

披露

2026-03-19

管理

已接受

条目

VDB-351738

CPE

准备好

CWE

CWE-22 (已确认)

CVSS

6.5 (CISA-ADP)

EPSS

0.00405

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2025-67115
NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-67115
CVE Details	https://www.cvedetails.com/cve/CVE-2025-67115/

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!