CVE-2025-3461
Critical
Description
The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an instance of CWE-306, "Missing Authentication for Critical Function," and is estimated as a CVSS 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.
SeverityCritical
CVSS9.1
Exploit probability—
ProductOnsemi Qhs710 Firmware
PublishedJun 8, 2025
First seenJun 8, 2025
Weakness typeCWE-306Missing authentication for critical function
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| onsemi qhs710_firmware | No range specified | — |
| onsemi qsr10ga_firmware | No range specified | — |
| onsemi qsr10gu_firmware | No range specified | — |
| onsemi qv840_firmware | No range specified | — |
| onsemi qv840c_firmware | No range specified | — |
| onsemi qv860_firmware | No range specified | — |
| onsemi qv940_firmware | No range specified | — |
| onsemi qv942c_firmware | No range specified | — |
| onsemi qv952c_firmware | No range specified | — |
| onsemi qcs-ax2-s5_firmware | No range specified | — |
| onsemi qcs-ax3-a12_firmware | No range specified | — |
| onsemi qcs-ax3-t12_firmware | No range specified | — |
| onsemi qcs-ax3-t8_firmware | No range specified | — |
| onsemi qcs-ax3-s5_firmware | No range specified | — |
| onsemi qcs-ax2-a12_firmware | No range specified | — |
| onsemi qcs-ax2-t12_firmware | No range specified | — |
| onsemi qcs-ax2-t8_firmware | No range specified | — |
| onsemi qd840_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.