CVE-2025-14859 identifies a cryptographic weakness in the Semtech LR1110 LoRa transceivers' secure boot implementation. The device uses a non-standard hashing algorithm vulnerable to second preimage attacks, which can be exploited by an attacker with physical access to generate a malicious firmware image that produces a hash collision. This allows bypassing the secure boot verification mechanism and installing unauthorized firmware. The vulnerability has a CVSS 4.0 score of 7, indicating high severity. No patch or official remediation has been published, and the device is not a cloud service.

An attacker with physical access to the affected Semtech LR1110 device can exploit the weak hashing algorithm to bypass secure boot protections. This enables installation of arbitrary malicious firmware, potentially compromising device integrity and security. The vulnerability does not require user interaction or privileges but does require physical access. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict physical access to affected devices to mitigate risk. Monitor for vendor updates regarding patches or secure boot improvements.