The vulnerability in the `set_tx_pow` function of Quantenna’s Wi-Fi chip software allows a hacker to execute arbitrary commands.

The vulnerability of the settxpow function in Quantenna’s Wi-Fi chips relates to the implementation or modification of certain arguments. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

CVE-2025-3460 ON Semiconductor Quantenna set_tx_pow Argument Injection

The Quantenna Wi-Fi chipset ships with a local control script, settxpow, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command 'Argument Injection'," and is estimated as a CVSS...