TI-2025-03040 CVE-2025-3461 · GHSA-f5vv-5ch7-632x
ON Semiconductor Quantenna Telnet Missing Authentication
Priority MEDIUM 50
The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default.
ON Semiconductor
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
ON Semiconductor records in CISA KEVNo ON Semiconductor vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2025-03039 CVE-2025-3460 · GHSA-rmr3-f2f2-5gjh
ON Semiconductor Quantenna set_tx_pow Argument Injection
Priority LOW 38
The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection.
TI-2025-23526 CVE-2025-32459 · GHSA-x9cq-hh4v-vrww
ON Semiconductor Quantenna router_command.sh (in the sync_time argument) Argument Injection
Priority LOW 37
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vulnerable to command injection.
TI-2025-23525 CVE-2025-32458 · GHSA-cgwq-jph9-cvc2
ON Semiconductor Quantenna router_command.sh (in the get_syslog_from_qtn argument) Argument Injection
Priority LOW 37
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument), that is vulnerable to command injection.
TI-2025-23524 CVE-2025-32457 · GHSA-rf7g-v8g6-48q6
ON Semiconductor Quantenna router_command.sh (in the get_file_from_qtn argument) Argument Injection
Priority LOW 37
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), that is vulnerable to command injection.
TI-2025-23523 CVE-2025-32456 · GHSA-3qvj-q9mh-gv5x
ON Semiconductor Quantenna router_command.sh (in the put_file_to_qtn argument) Argument Injection
Priority LOW 37
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that is vulnerable to command injection.
TI-2025-23522 CVE-2025-32455 · GHSA-wwc6-hv89-4c8g
ON Semiconductor Quantenna router_command.sh (in the run_cmd argument) Argument Injection
Priority LOW 37
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd argument), that is vulnerable to command injection.
TI-2025-03038 CVE-2025-3459 · GHSA-84ch-w4f5-gxjw
ON Semiconductor Quantenna transmit_file Argument Injection
Priority LOW 37
The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to command injection.