Onsemi

Qcs-ax2-a12 Firmware

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2025-32459

  • EPSS 0.15%
  • Veröffentlicht 08.06.2025 21:04:25
  • Zuletzt bearbeitet 21.01.2026 15:51:22

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argum...

7.8

CVE-2025-32458

  • EPSS 0.15%
  • Veröffentlicht 08.06.2025 21:04:12
  • Zuletzt bearbeitet 21.01.2026 15:46:45

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Comma...

7.8

CVE-2025-32457

  • EPSS 0.15%
  • Veröffentlicht 08.06.2025 21:03:24
  • Zuletzt bearbeitet 13.01.2026 20:25:19

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command...

7.8

CVE-2025-32456

  • EPSS 0.15%
  • Veröffentlicht 08.06.2025 21:03:12
  • Zuletzt bearbeitet 13.01.2026 20:20:46

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command (...

7.8

CVE-2025-32455

  • EPSS 0.15%
  • Veröffentlicht 08.06.2025 21:02:58
  • Zuletzt bearbeitet 13.01.2026 20:12:22

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argumen...

9.8

CVE-2025-3461

Exploit
  • EPSS 0.1%
  • Veröffentlicht 08.06.2025 21:02:37
  • Zuletzt bearbeitet 13.01.2026 20:01:27

The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an instance of CWE-306, "Missing Authentication for Critical Function," and is estimated as a CVSS 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). This is...

7.8

CVE-2025-3460

Exploit
  • EPSS 0.31%
  • Veröffentlicht 08.06.2025 21:02:24
  • Zuletzt bearbeitet 21.01.2026 16:02:39

The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated ...

7.8

CVE-2025-3459

  • EPSS 0.15%
  • Veröffentlicht 08.06.2025 21:02:09
  • Zuletzt bearbeitet 21.01.2026 15:58:56

The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimat...