Is CVE-2025-14857 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-14857 being exploited in the wild.

How severe is CVE-2025-14857?

Informational severity, with a CVSS score of 5.4, published 7 April 2026.

Which products and versions are affected?

Semtech LR1110 TRX FW < 0x0402; Semtech LR1120 TRX FW < 0x0202; Semtech LR1121 TRX FW < 0x0104.

Is there a fix for CVE-2025-14857?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-14857 attacked?

It is attacked with physical access, in device firmware.

Am I affected by CVE-2025-14857?

Check whether you run Semtech LR1110, Semtech LR1120 or Semtech LR1121 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-14857: Semtech LoRa LR11xxx improper access control in SPI memory write

Q: Is there a fix for CVE-2025-14857?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2025-14857 attacked?

It is attacked with physical access, in device firmware.

Q: Am I affected by CVE-2025-14857?

Check whether you run Semtech LR1110, Semtech LR1120 or Semtech LR1121 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-14857 · Severity: info · CVSS 5.4 · Published 2026-04-07

Semtech LoRa transceivers, which are used for long-range wireless communication in IoT devices, contain a security flaw in their early firmware versions. An attacker with physical access to the device's internal wiring can bypass security controls to temporarily take control of the chip's operations. While this allows for unauthorized code execution, the impact is limited because the device's secure boot prevents permanent changes, and sensitive cryptographic keys remain isolated from the attacker.

Technologies: Semtech LR1110, Semtech LR1120, Semtech LR1121. Vendors: Semtech.

Quick answers

Is CVE-2025-14857 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-14857 being exploited in the wild.
How severe is CVE-2025-14857?: Informational severity, with a CVSS score of 5.4, published 7 April 2026.
Which products and versions are affected?: Semtech LR1110 TRX FW < 0x0402; Semtech LR1120 TRX FW < 0x0202; Semtech LR1121 TRX FW < 0x0104.
Is there a fix for CVE-2025-14857?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-14857 attacked?: It is attacked with physical access, in device firmware.
Am I affected by CVE-2025-14857?: Check whether you run Semtech LR1110, Semtech LR1120 or Semtech LR1121 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper access control vulnerability (CWE-123) exists in the firmware of Semtech LR11xxx transceivers. The memory write command, accessible via the physical Serial Peripheral Interface (SPI), fails to enforce write protection on the program call stack. By exploiting this, a physical attacker can overwrite stack memory to hijack program control flow and achieve arbitrary code execution. The exploit is non-persistent as the device's secure boot mechanism prevents permanent firmware modification, and the hardware crypto engine prevents the attacker from accessing cryptographic keys. The issue is resolved in firmware versions 0x0402 (LR1110), 0x0202 (LR1120), and 0x0104 (LR1121).

Affected products

Semtech LR1110 TRX FW < 0x0402
Semtech LR1120 TRX FW < 0x0202
Semtech LR1121 TRX FW < 0x0104

Timeline

2026-04-07: advisory: Semtech published security bulletin SEM-PSA-2026-001
2026-04-07: disclosed: CVE-2025-14857 published to NVD

References

https://www.semtech.com/company/security/security-bulletins/sem-psa-2026-001

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.