Vulnerability Details CVE-2025-3460
The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 78.0%
CVSS Severity
CVSS v3 Score 7.7
References
Products affected by CVE-2025-3460
-
cpe:2.3:h:onsemi:qcs-ax2-a12:-
-
cpe:2.3:h:onsemi:qcs-ax2-s5:-
-
cpe:2.3:h:onsemi:qcs-ax2-t12:-
-
cpe:2.3:h:onsemi:qcs-ax2-t8:-
-
cpe:2.3:h:onsemi:qcs-ax3-a12:-
-
cpe:2.3:h:onsemi:qcs-ax3-s5:-
-
cpe:2.3:h:onsemi:qcs-ax3-t12:-
-
cpe:2.3:h:onsemi:qcs-ax3-t8:-
-
cpe:2.3:h:onsemi:qd840:-
-
cpe:2.3:h:onsemi:qhs710:-
-
cpe:2.3:h:onsemi:qsr10ga:-
-
cpe:2.3:h:onsemi:qsr10gu:-
-
cpe:2.3:h:onsemi:qv840:-
-
cpe:2.3:h:onsemi:qv840c:-
-
cpe:2.3:h:onsemi:qv860:-
-
cpe:2.3:h:onsemi:qv940:-
-
cpe:2.3:h:onsemi:qv942c:-
-
cpe:2.3:h:onsemi:qv952c:-
-
cpe:2.3:o:onsemi:qcs-ax2-a12_firmware:-
-
cpe:2.3:o:onsemi:qcs-ax2-s5_firmware:-
-
cpe:2.3:o:onsemi:qcs-ax2-t12_firmware:-
-
cpe:2.3:o:onsemi:qcs-ax2-t8_firmware:-
-
cpe:2.3:o:onsemi:qcs-ax3-a12_firmware:-
-
cpe:2.3:o:onsemi:qcs-ax3-s5_firmware:-
-
cpe:2.3:o:onsemi:qcs-ax3-t12_firmware:-
-
cpe:2.3:o:onsemi:qcs-ax3-t8_firmware:-
-
cpe:2.3:o:onsemi:qd840_firmware:-
-
cpe:2.3:o:onsemi:qhs710_firmware:-
-
cpe:2.3:o:onsemi:qsr10ga_firmware:-
-
cpe:2.3:o:onsemi:qsr10gu_firmware:-
-
cpe:2.3:o:onsemi:qv840_firmware:-
-
cpe:2.3:o:onsemi:qv840c_firmware:-
-
cpe:2.3:o:onsemi:qv860_firmware:-
-
cpe:2.3:o:onsemi:qv940_firmware:-
-
cpe:2.3:o:onsemi:qv942c_firmware:-
-
cpe:2.3:o:onsemi:qv952c_firmware:-