CVE-2025-3461
Published Jun 8, 2025The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an instance of CWE-306, "Missing Authentication for Critical Function," and is estimate…
Vendor/product archive
onsemi / qv860_firmware CVEs
Beta · best-effort8 CVEs tagged to onsemi / qv860_firmware — 1 Critical, 7 High, 0 Medium, 0 Low, 0 Unrated.
CVE-2025-3460
Published Jun 8, 2025The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argu…
CVE-2025-3459
Published Jun 8, 2025The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of A…
CVE-2025-32459
Published Jun 8, 2025The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vulnerable to command injection. This is an instance of CWE-8…
CVE-2025-32458
Published Jun 8, 2025The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument), that is vulnerable to command injection. This is an instanc…
CVE-2025-32457
Published Jun 8, 2025The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), that is vulnerable to command injection. This is an instance…
CVE-2025-32456
Published Jun 8, 2025The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that is vulnerable to command injection. This is an instance of…
CVE-2025-32455
Published Jun 8, 2025The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd argument), that is vulnerable to command injection. This is an instance of CWE-88,…
Showing 1-8 of 8 CVEsPage 1 of 1