ON Semiconductor vulnerabilities
We track 8 vulnerabilities in ON Semiconductor products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on June 8, 2025.
Latest ON Semiconductor vulnerabilities
- 9.8 Critical severity
Quantenna Wi-Fi chipset: Missing Authentication for Critical Functionality
The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an instance of CWE-306, "Missing Authentication for Critical Function," and is estimated as a CVSS 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). This issue affect
- 7.8 High severity
Quantenna Wi-Fi chipset: Improper Neutralization of Argument Delimiters in a Command
The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS
- 7.8 High severity
Quantenna Wi-Fi chipset: Improper Neutralization of Argument Delimiters in a Command
The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CV
- 7.8 High severity
Quantenna Wi-Fi chipset: Improper Neutralization of Argument Delimiters in a Command
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Inject
- 7.8 High severity
Quantenna Wi-Fi chipset: Improper Neutralization of Argument Delimiters in a Command
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argum
- 7.8 High severity
Quantenna Wi-Fi chipset: Improper Neutralization of Argument Delimiters in a Command
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argumen
- 7.8 High severity
Quantenna Wi-Fi chipset: Improper Neutralization of Argument Delimiters in a Command
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument
- 7.8 High severity
Quantenna Wi-Fi chipset: Improper Neutralization of Argument Delimiters in a Command
The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injectio