MEDIUM · 6.5

CVE-2025-59601

Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.

Vulnerability Description

Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
QualcommFastconnect 7800 Firmware-
QualcommFastconnect 7800-
QualcommQca7005 Firmware-
QualcommQca7005-
QualcommSnapdragon Ar1 Gen 1 Platform Firmware-
QualcommSnapdragon Ar1 Gen 1 Platform-
QualcommWcd9380 Firmware-
QualcommWcd9380-
QualcommWcd9385 Firmware-
QualcommWcd9385-
QualcommWsa8830 Firmware-
QualcommWsa8830-
QualcommWsa8832 Firmware-
QualcommWsa8832-
QualcommWsa8835 Firmware-
QualcommWsa8835-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2025-59601?

CVE-2025-59601 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.

How severe is CVE-2025-59601?

CVE-2025-59601 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-59601?

Check the references section above for vendor advisories and patch information. Affected products include: Qualcomm Fastconnect 7800 Firmware, Qualcomm Fastconnect 7800, Qualcomm Qca7005 Firmware, Qualcomm Qca7005, Qualcomm Snapdragon Ar1 Gen 1 Platform Firmware.