Vulnerabilities

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vulnerable to command injection.

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument), that is vulnerable to command injection.

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), that is vulnerable to command injection.

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that is vulnerable to command injection.

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd argument), that is vulnerable to command injection.

The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default.

The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection.

The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to command injection.