CVE-2025-3460 - CVE House
Back to Database
Status published High CVE-2025-3460

ON Semiconductor Quantenna set_tx_pow Argument Injection

Vulnerability Description

The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-3460

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Ricky "HeadlessZeke" Lawshae of Keysight
  • todb

References

More from ON Semiconductor

View All →
CVE-2025-3461
ON Semiconductor Quantenna Telnet Missing Authentication
Critical 9.1
CVE-2025-3459
ON Semiconductor Quantenna transmit_file Argument Injection
High 7.7
CVE-2025-32459
ON Semiconductor Quantenna router_command.sh (in the sync_time argument) Argument Injection
High 7.7
CVE-2025-32458
ON Semiconductor Quantenna router_command.sh (in the get_syslog_from_qtn argument) Argument Injection
High 7.7
CVE-2025-32457
ON Semiconductor Quantenna router_command.sh (in the get_file_from_qtn argument) Argument Injection
High 7.7

Affected Vendor

ON Semiconductor

View all reports →

Affected Software

Quantenna Wi-Fi chipset
Vulnerable Versions:
0

Timeline

Official Publish: June 8th, 2025
Last Modified: June 9th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-88

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1068 Exploitation for Privilege Escalation
Privilege Escalation