CVE-2025-59601: Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
Published Jun 1, 2026
·Updated
Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.
Affected Software
16 affected components
All of the following
Qualcomm Fastconnect 7800 Firmware
Qualcomm Fastconnect 7800
All of the following
Qualcomm Qca7005 Firmware
Qualcomm Qca7005
All of the following
Qualcomm Snapdragon Ar1 Gen 1 Platform Firmware
Qualcomm Snapdragon Ar1 Gen 1 Platform
All of the following
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
All of the following
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
All of the following
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
All of the following
Qualcomm Wsa8832 Firmware
Qualcomm Wsa8832
All of the following
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Event History
Jun 1, 2026
CVE Published
via MITRE·10:05 PM
Data Sourced
via MITRE·10:05 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-59601?
The severity of CVE-2025-59601 is medium with a score of 6.5.
2
What does CVE-2025-59601 expose?
CVE-2025-59601 exposes sensitive information through metadata when resetting the device to factory default settings.
3
Which products are affected by CVE-2025-59601?
CVE-2025-59601 affects various Qualcomm firmware including Fastconnect 7800, Qca7005, and Snapdragon Ar1 Gen 1.
4
How can I mitigate the risks of CVE-2025-59601?
To mitigate CVE-2025-59601, it is advisable to avoid resetting the device to factory settings through the vulnerable powerline interface.
5
What type of vulnerability is CVE-2025-59601?
CVE-2025-59601 is classified as an information disclosure vulnerability.