EUVD-2025-17411

The Quantenna Wi-Fi chipset SDK includes a local control script (set_tx_pow) responsible for transmit power configuration on Wi-Fi interfaces. This script fails to properly sanitize and neutralize command-line argument delimiters (CWE-88), allowing an attacker to inject shell metacharacters or additional commands into the argument processing logic. The vulnerability resides in the command construction phase where user-supplied input is concatenated directly into system calls without proper escaping, quoting, or parameterized command construction. This is a classic argument injection flaw distinct from simple command injection, where delimiters themselves become the attack vector rather than shell command separators. Affected products include devices implementing Quantenna Wi-Fi chipsets (CPE pattern: qualcomm-quantenna products) across multiple OEM implementations (routers, access points, embedded systems). The root cause is improper input validation in a privileged local utility.