CVE-2025-14859

CVE-2025-14859 affects Semtech LR11xx LoRa transceivers and involves a weakness in their secure boot implementation. The vulnerability exploits a non-standard cryptographic hashing algorithm used to authenticate firmware, which is susceptible to second preimage attacks. This allows an attacker with physical device access to generate malicious firmware with hash collisions, thereby bypassing secure boot verification and installing unauthorized code. The attack requires physical access to the device, limiting its practical threat scope to scenarios involving insider threats or device theft. While the specific CVSS vector is not publicly available, the attack complexity is relatively low once physical access is obtained. The potential impact is severe, as successful exploitation grants complete control over device firmware with no authentication barriers post-compromise. There is no evidence of active exploitation in the wild, and the vulnerability is not listed on the CISA Known Exploited Vulnerabilities catalog. The EPSS score of 0.0001 indicates minimal real-world exploitation activity. Community attention appears limited, though the moderate FAUCET risk score of 37.0 suggests organizations deploying Semtech LR11xx devices should evaluate their physical security controls and consider firmware update deployment once patches become available.