CVE-2025-67115

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A path traversal vulnerability in /ftl/web/setup.cgi in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote authenticated users to read arbitrary files from the filesystem via crafted values in the log_type parameter to /logsave.htm.

Published 2026-03-19. Last modified 2026-06-17.