Onsemi develops a focused line of wireless connectivity and IoT system-on-chip products, with documented vulnerabilities concentrating in its QCS firmware across multiple hardware variants. The exposure recurs through argument injection and missing authentication for critical functions, reflecting the embedded and wireless protocol complexity of its connected-device portfolio, and vulnerabilities affecting this vendor skew toward serious outcomes. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Onsemi over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-3461CRITICAL The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an instance of CWE-306, "Missing Authentication for Critical Function," and is estimated | Jun 8, 2025 | 9.8 | 27 | NO | NO |
CVE-2025-32459HIGH The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vulnerable to command injection. This is an instance of CWE-88 | Jun 8, 2025 | 7.8 | 23 | NO | NO |
CVE-2025-32458HIGH The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument), that is vulnerable to command injection. This is an instance | Jun 8, 2025 | 7.8 | 23 | NO | NO |
CVE-2025-32457HIGH The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), that is vulnerable to command injection. This is an instance o | Jun 8, 2025 | 7.8 | 23 | NO | NO |
CVE-2025-32456HIGH The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that is vulnerable to command injection. This is an instance of | Jun 8, 2025 | 7.8 | 23 | NO | NO |
CVE-2025-3460HIGH The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argum | Jun 8, 2025 | 7.8 | 22 | NO | NO |
CVE-2025-3459HIGH The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Ar | Jun 8, 2025 | 7.8 | 22 | NO | NO |
CVE-2025-32455HIGH The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd argument), that is vulnerable to command injection. This is an instance of CWE-88, | Jun 8, 2025 | 7.8 | 22 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Onsemi.
Media articles that mention a CVE ID that affects a product developed by Onsemi — matched by CVE ID, not by vendor name.