Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/78ac91af-4d71-43f4-b9fc-cf5e6874e7de?source=cve - https://wordpress.org/plugins/smtp-amazon-ses/ - https://plugins.trac.wordpress.org/browser/smtp-amazon-ses/trunk/includes/Functions.php - https://plugins.trac.wordpress.org/browser/smtp-amazon-ses/trunk/includes/Helper/Utils.php - https://plugins.trac.wordpress.org/changeset/3270161/
CVE ID: CVE-2025-3435 State: PUBLISHED Published: 2025-04-24T03:21:30.361Z Last Updated: 2025-04-24T13:59:44.373Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: kitae-park Products: Mang Board WP Problem Types: CWE-79 Description: The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the board_header and board_footer parameters in all versions up to, and including, 1.8.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only
access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5b97a2f7-b730-4fb7-a41e-dd37f5f87f27?source=cve - https://plugins.trac.wordpress.org/changeset/3272163/mangboard/trunk
CVE ID: CVE-2025-3436 State: PUBLISHED Published: 2025-04-08T08:22:09.361Z Last Updated: 2025-04-08T13:13:33.884Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: gdragon Products: coreActivity: Activity Logging for WordPress Problem Types: CWE-89 Description: The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'order' and 'orderby' parameters in all versions up to, and including, 2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to appen
existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e1ebbb18-0266-49e8-ada3-b63905021846?source=cve - https://plugins.trac.wordpress.org/changeset/3259839/coreactivity/trunk/core/table/Live.php
CVE ID: CVE-2025-3437 State: PUBLISHED Published: 2025-04-08T09:21:19.883Z Last Updated: 2025-04-08T13:05:15.170Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: stylemix Products: Motors – Car Dealership & Classified Listings Plugin Problem Types: CWE-862 Description: The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in the ajax_actions.php file in all versions up to, and including, 1.4.66. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute several initial set-up actions. Ad
sible for authenticated attackers, with Subscriber-level access and above, to execute several initial set-up actions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d0af6050-8602-4ed3-b017-c10aa023849b?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3267930%40motors-car-dealership-classified-listings&new=3267930%40motors-car-dealership-classified-listings&sfp_email=&sfph_mail= - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3267930%40motors-car-dealership-classified-listings&new=3267930%40motors-car-dealership-classified-listings&sfp_ema
&old=3267930%40motors-car-dealership-classified-listings&new=3267930%40motors-car-dealership-classified-listings&sfp_email=&sfph_mail=#file2
CVE ID: CVE-2025-3438 State: PUBLISHED Published: 2025-05-02T05:22:34.308Z Last Updated: 2025-05-02T15:47:36.691Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: inspireui Products: MStore API – Create Native Android & iOS Apps On The Cloud Problem Types: CWE-269 Description: The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to limited privilege escalation in all versions up to, and including, 4.17.4. This is due to a lack of restriction of role when registering. This makes it possible for unauthenticated attackers to to register with the 'wcfm_vendor' role, which is a Store Vendor role in the WCFM Marketplace
uthenticated attackers to to register with the 'wcfm_vendor' role, which is a Store Vendor role in the WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin for WordPress. The vulnerability can only be exploited if the WCFM Marketplace – Multivendor Marketplace for WooCommerce plugin is installed and activated. The vulnerability was partially patched in version 4.17.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/be5d86ad-f94b-4fcb-9b74-ecddde2bf29d?source=cve - https://plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L392 - https://plugins.trac.wordpress.org/browser/msto
rdpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L392 - https://plugins.trac.wordpress.org/browser/mstore-api/trunk/controllers/flutter-user.php#L413 - https://plugins.trac.wordpress.org/changeset/3277790 - https://plugins.trac.wordpress.org/changeset/3279132/
CVE ID: CVE-2025-3439 State: PUBLISHED Published: 2025-04-11T12:42:23.783Z Last Updated: 2025-04-11T13:19:06.177Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: wpeverest Products: Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress Problem Types: CWE-502 Description: The Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1.1 via deserialization of untrusted input from the 'field_value' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No kn
put from the 'field_value' parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0e5617a2-5670-4d98-a36b-942f71634642
lnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0e5617a2-5670-4d98-a36b-942f71634642?source=cve - https://plugins.trac.wordpress.org/browser/everest-forms/trunk/includes/admin/views/html-admin-page-entries-view.php#L147 - https://plugins.trac.wordpress.org/changeset/3268742/
CVE ID: CVE-2025-3440 State: PUBLISHED Published: 2025-05-15T15:40:34.829Z Last Updated: 2025-08-26T15:06:56.970Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: IBM Products: Security Guardium Problem Types: CWE-79 Description: IBM Security Guardium 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7233600
CVE ID: CVE-2025-3441 State: REJECTED Published: N/A Last Updated: 2025-04-22T22:16:01.718Z Description: No description available.
CVE ID: CVE-2025-3442 State: PUBLISHED Published: 2025-04-09T07:02:54.195Z Last Updated: 2025-04-11T05:33:25.874Z Vendors: TP-Link Products: Tapo H200 V1 IoT Smart Hub Problem Types: CWE-312 Description: This vulnerability exists in TP-Link Tapo H200 V1 IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0072
CVE ID: CVE-2025-3444 State: PUBLISHED Published: 2025-05-22T10:31:48.562Z Last Updated: 2025-05-22T18:28:27.922Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: ManageEngine Products: ServiceDesk Plus MSP, SupportCenter Plus Problem Types: CWE-434 Description: Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is loaded. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/service-desk-msp/cve-2025-3444.html
CVE ID: CVE-2025-3445 State: PUBLISHED Published: 2025-04-13T22:10:21.444Z Last Updated: 2025-04-14T19:07:54.939Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L) Vendors: github.com/mholt/archiver/v3 Products: github.com/mholt/archiver/v3 Problem Types: CWE-22 Description: A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a crafted ZIP file containing path traversal symlinks to create or overwrite files with the user's privileges or application utilizing the library. When using the archiver.Unarchive functionality with ZIP files, like this: archiver.Unarchive(zipFile, outputDir), A crafted ZIP file ca
rchiver.Unarchive functionality with ZIP files, like this: archiver.Unarchive(zipFile, outputDir), A crafted ZIP file can be extracted in such a way that it writes files to the affected system with the same privileges as the application executing this vulnerable functionality. Consequently, sensitive files may be overwritten, potentially leading to privilege escalation, code execution, and other severe outcomes in some cases. It's worth noting that a similar vulnerability was found in TAR files (CVE-2024-0406). Although a fix was implemented, it hasn't been officially released, and the affected project has since been deprecated. The successor to mholt/archiver is a new project called mholt/a
sed, and the affected project has since been deprecated. The successor to mholt/archiver is a new project called mholt/archives, and its initial release (v0.1.0) removes the Unarchive() functionality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mholt/archiver/
CVE ID: CVE-2025-3446 State: PUBLISHED Published: 2025-05-15T10:43:46.639Z Last Updated: 2025-05-15T13:41:54.267Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-863 Description: Mattermost versions 10.6.x <= 10.6.1, 10.5.x <= 10.5.2, 10.4.x <= 10.4.4, 9.11.x <= 9.11.11 fail to check the correct permissions which allows authenticated users who only have permission to invite non-guest users to a team to add guest users to that team via the API to add a single user to a team. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-3448 State: PUBLISHED Published: 2025-10-07T18:21:12.633Z Last Updated: 2025-10-08T13:11:13.217Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: B&R Industrial Automation GmbH Products: Automation Runtime Problem Types: CWE-79 Description: Reflected cross-site scripting (XSS) vulnerabilities exist in System Diagnostics Manager (SDM) of B&R Automation Runtime versions before 6.4 that enables a remote attacker to execute arbitrary JavaScript code in the context of the attacked user’s browser session Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/fileadmin/SA25P003-178b6a20.pdf
CVE ID: CVE-2025-3449 State: PUBLISHED Published: 2025-10-07T18:21:32.231Z Last Updated: 2025-10-08T13:15:41.649Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: B&R Industrial Automation GmbH Products: Automation Runtime Problem Types: CWE-340 Description: A Generation of Predictable Numbers or Identifiers vulnerability in the SDM component of B&R Automation Runtime versions before 6.4 may allow an unauthenticated network-based attacker to take over already established sessions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/fileadmin/SA25P003-178b6a20.pdf
CVE ID: CVE-2025-3450 State: PUBLISHED Published: 2025-10-07T18:03:53.869Z Last Updated: 2025-10-08T10:53:31.397Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: B&R Industrial Automation Products: Automation Runtime Problem Types: CWE-413 Description: An Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime versions before 6.3 and before Q4.93 may allow an unauthenticated network-based attacker to delete data causing denial of service conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/fileadmin/SA25P002-f6a69e61.pdf
CVE ID: CVE-2025-3452 State: PUBLISHED Published: 2025-04-29T08:21:44.044Z Last Updated: 2025-04-29T13:26:15.223Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: secupress Products: SecuPress Free — WordPress Security Problem Types: CWE-862 Description: The SecuPress Free — WordPress Security plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'secupress_reinstall_plugins_admin_ajax_cb' function in all versions up to, and including, 2.3.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins. Additional Analyst Notes: - CISA ADP Vu
attackers, with Subscriber-level access and above, to install arbitrary plugins. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d9125873-aedd-4334-b8e0-74b67d301904?source=cve - https://plugins.trac.wordpress.org/browser/secupress/trunk/free/modules/plugins-themes/tools.php#L686 - https://plugins.trac.wordpress.org/changeset/3283453/
CVE ID: CVE-2025-3453 State: PUBLISHED Published: 2025-04-17T11:13:05.367Z Last Updated: 2025-04-17T14:34:17.596Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: saadiqbal Products: Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products – Restrict Content, Protect WooCommerce Category and more Problem Types: CWE-863 Description: The Password Protected – Password Protect your WordPress Site, Pages, & WooCommerce Products – Restrict Content, Protect WooCommerce Category and more plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.7 via the 'password_protected_cookie' f
able to Sensitive Information Exposure in all versions up to, and including, 2.7.7 via the 'password_protected_cookie' function. This makes it possible for unauthenticated attackers to extract sensitive data including all protected site content if the 'Use Transient' setting is enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/241d75ca-55e3-461a-9844-52e69904da1b?source=cve - https://plugins.trac.wordpress.org/browser/password-protected/trunk/includes/compatibility.php - https://plugins.trac.wordpress.org/changeset/3274358/
CVE ID: CVE-2025-3454 State: PUBLISHED Published: 2025-06-02T10:34:09.254Z Last Updated: 2025-06-02T12:04:24.348Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Grafana Products: Grafana, Grafana Enterprise Problem Types: CWE-285 Description: This vulnerability in Grafana's datasource proxy API allows authorization checks to be bypassed by adding an extra slash character in the URL path. Users with minimal permissions could gain unauthorized read access to GET endpoints in Alertmanager and Prometheus datasources. The issue primarily affects datasources that implement route-specific permissions, including Alertmanager and certain Prometheus-based datasources.
datasources that implement route-specific permissions, including Alertmanager and certain Prometheus-based datasources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://grafana.com/security/security-advisories/cve-2025-3454/
CVE ID: CVE-2025-3455 State: PUBLISHED Published: 2025-05-09T06:42:36.239Z Last Updated: 2025-05-09T16:14:07.984Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: 1clickmigration Products: 1 Click WordPress Migration Plugin – 100% FREE for a limited time Problem Types: CWE-434 Description: The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'start_restore' function in all versions up to, and including, 2.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the af
kes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e982ae88-cfd0-46b9-ad64-00e398d307d6?source=cve - https://plugins.trac.wordpress.org/browser/1-click-migration/trunk/inc/backup/class-ocm-backup.php#L403
CVE ID: CVE-2025-3456 State: PUBLISHED Published: 2025-08-25T20:02:48.722Z Last Updated: 2025-08-25T20:31:54.730Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Arista Networks Products: EOS Problem Types: CWE-532 Description: On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from the device running-config could then be used to obtain protocol specific passwords in cases where symmetric passwords are required between devices with neighbor protocol relationships. Additional Analyst N
cases where symmetric passwords are required between devices with neighbor protocol relationships. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://https://www.arista.com/en/support/advisories-notices/security-advisory/22022-security-advisory-0122
CVE ID: CVE-2025-3457 State: PUBLISHED Published: 2025-04-22T11:12:20.601Z Last Updated: 2025-04-22T13:24:03.581Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: oceanwp Products: Ocean Extra Problem Types: CWE-79 Description: The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'oceanwp_icon' shortcode in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an inj
butor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/362a01c0-8b97-40dc-8af5-0d904da96576?source=cve - https://plugins.trac.wordpress.org/browser/ocean-extra/tags/2.4.5/includes/shortcodes/shortcodes.php#L838 - https://themes.trac.wordpress.org/browser/oceanwp/4.0.6/inc/oceanwp-theme-icons.php#L866 - https://themes.trac.wordpress.org/browser/oceanwp/4.0.6/inc/oceanwp-theme-icons.php#L819 - https://plugins.trac.wordpress.org/changeset/3277977/
CVE ID: CVE-2025-3458 State: PUBLISHED Published: 2025-04-22T11:12:21.602Z Last Updated: 2025-04-22T13:22:45.929Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: oceanwp Products: Ocean Extra Problem Types: CWE-79 Description: The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ocean_gallery_id’ parameter in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The Classic Editor pl
inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The Classic Editor plugin must be installed and activated to exploit the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7595a1f6-6923-4102-8efe-a414adebce65?source=cve - https://plugins.trac.wordpress.org/browser/ocean-extra/tags/2.4.6/includes/metabox/gallery-metabox/gallery-metabox.php#L113 - https://plugins.trac.wordpress.org/browser/ocean-extra/tags/2.4.6/includes/metabox/gallery-metabox/gallery-metabox.php#L162 - https://plugins.trac.wordpress.org/changeset/3277977/
CVE ID: CVE-2025-3459 State: PUBLISHED Published: 2025-06-08T21:02:09.918Z Last Updated: 2025-06-09T18:36:35.345Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: ON Semiconductor Products: Quantenna Wi-Fi chipset Problem Types: CWE-88 Description: The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be
/C:H/I:H/A:N). This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://takeonme.org/cves/cve-2025-3459 - https://community.onsemi.com/s/article/QCS-Quantenna-Wi-Fi-product-support-and-security-best-practices
CVE ID: CVE-2025-3460 State: PUBLISHED Published: 2025-06-08T21:02:24.334Z Last Updated: 2025-06-09T18:33:57.925Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: ON Semiconductor Products: Quantenna Wi-Fi chipset Problem Types: CWE-88 Description: The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unp