Evil-DB LogoEvil-DB
← All CVEs

CVE-2025-3461

critical · 9.1

The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an instance of CWE-306, "Missing Authentication for Critical Function," and is estimated as a CVSS 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.

9.1
CVSS
0.6%
EPSS (exploit prob.)
45th
EPSS percentile
2025-06-08
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses

CWE-306

Affected products

VendorProductAffected versions
onsemiqhs710_firmwareall versions
onsemiqhs710all versions
onsemiqsr10ga_firmwareall versions
onsemiqsr10gaall versions
onsemiqsr10gu_firmwareall versions
onsemiqsr10guall versions
onsemiqv840_firmwareall versions
onsemiqv840all versions
onsemiqv840c_firmwareall versions
onsemiqv840call versions
onsemiqv860_firmwareall versions
onsemiqv860all versions
onsemiqv940_firmwareall versions
onsemiqv940all versions
onsemiqv942c_firmwareall versions
onsemiqv942call versions
onsemiqv952c_firmwareall versions
onsemiqv952call versions
onsemiqcs-ax2-s5_firmwareall versions
onsemiqcs-ax2-s5all versions
onsemiqcs-ax3-a12_firmwareall versions
onsemiqcs-ax3-a12all versions
onsemiqcs-ax3-t12_firmwareall versions
onsemiqcs-ax3-t12all versions
onsemiqcs-ax3-t8_firmwareall versions
onsemiqcs-ax3-t8all versions
onsemiqcs-ax3-s5_firmwareall versions
onsemiqcs-ax3-s5all versions
onsemiqcs-ax2-a12_firmwareall versions
onsemiqcs-ax2-a12all versions
onsemiqcs-ax2-t12_firmwareall versions
onsemiqcs-ax2-t12all versions
onsemiqcs-ax2-t8_firmwareall versions
onsemiqcs-ax2-t8all versions
onsemiqd840_firmwareall versions
onsemiqd840all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-3461