עברית

Vulnerability Intelligence

CVE-2025-59601

Medium 6.5

Published
Last modified
NVD status
Analyzed

Description

Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.

Affected products

qualcomm: fastconnect 7800 firmware; qualcomm: fastconnect 7800; qualcomm: qca7005 firmware; qualcomm: qca7005; qualcomm: snapdragon ar1 gen 1 platform firmware; qualcomm: snapdragon ar1 gen 1 platform; qualcomm: wcd9380 firmware; qualcomm: wcd9380; qualcomm: wcd9385 firmware; qualcomm: wcd9385; qualcomm: wsa8830 firmware; qualcomm: wsa8830; qualcomm: wsa8832 firmware; qualcomm: wsa8832; qualcomm: wsa8835 firmware

References1

Metrics

CVSS 3.1
6.5 MEDIUM Score source: CNA CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS — exploit probability
0% percentile: 1 · as of 15 November 2026
CWE
CWE-1230

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.