PT-2025-24374 · Quantenna · Quantenna Wi-Fi Chipset

Todb

·

Published

2025-03-27

·

Updated

2026-01-21

·

CVE-2025-3460

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Quantenna Wi-Fi chipset versions prior to 8.0.0.28
Description The Quantenna Wi-Fi chipset ships with a local control script, set tx pow, that is vulnerable to command injection. This issue is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command (Argument Injection)". The vendor has released a best practices guide for implementors of this chipset.
Recommendations For versions prior to 8.0.0.28, consider disabling the set tx pow script until a patch is available. Restrict access to the local control interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

BDU:2025-06631
BDU:2025-06633
CVE-2025-3460

Affected Products

Quantenna Wi-Fi Chipset