Onsemi QSR10GU Firmware vulnerabilities

8 CVEs affecting Onsemi QSR10GU Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-3461, published 2025-06-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-3460, published 2025-06-08. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a…
CVE-2025-32458, published 2025-06-08. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88,…
CVE-2025-32457, published 2025-06-08. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper…
CVE-2025-3459, published 2025-06-08. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters…
CVE-2025-32459, published 2025-06-08. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper…
CVE-2025-32456, published 2025-06-08. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper…
CVE-2025-32455, published 2025-06-08. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper…
CVE-2025-3461, published 2025-06-08. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an instance of CWE-306, "Missing Authentication for Critical Function," and is estimated as a CVSS 9.1…