Improper Access Control Vulnerability in Semtech LoRa Transceivers

CVE-2025-14857

What is CVE-2025-14857?

An improper access control vulnerability has been identified in early firmware versions of Semtech LoRa LR11xxx transceivers. This vulnerability allows an attacker with physical access to the SPI interface to bypass write protection on the program call stack, potentially enabling the overwriting of stack memory. Such an action can hijack the control flow of the device and achieve limited arbitrary code execution; however, the effects are isolated to the current session. The device's secure boot mechanism ensures that no persistent modifications can be made to the firmware, as cryptographic keys are guarded from direct access, and any alterations will be reversed upon reboot or loss of physical access.

References