CVE-2025-3459
Description
The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| onsemi qcs-ax3-s5_firmware | No range specified | — |
| onsemi qcs-ax2-a12_firmware | No range specified | — |
| onsemi qcs-ax2-t12_firmware | No range specified | — |
| onsemi qcs-ax2-t8_firmware | No range specified | — |
| onsemi qd840_firmware | No range specified | — |
| onsemi qhs710_firmware | No range specified | — |
| onsemi qsr10ga_firmware | No range specified | — |
| onsemi qsr10gu_firmware | No range specified | — |
| onsemi qv840_firmware | No range specified | — |
| onsemi qv840c_firmware | No range specified | — |
| onsemi qv860_firmware | No range specified | — |
| onsemi qv940_firmware | No range specified | — |
| onsemi qv942c_firmware | No range specified | — |
| onsemi qv952c_firmware | No range specified | — |
| onsemi qcs-ax2-s5_firmware | No range specified | — |
| onsemi qcs-ax3-a12_firmware | No range specified | — |
| onsemi qcs-ax3-t12_firmware | No range specified | — |
| onsemi qcs-ax3-t8_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.