This vulnerability (CVE-2025-59601) affects the Qualcomm Snapdragon QCA7005 chipset. It is classified under CWE-1230, indicating exposure of sensitive information through metadata. The issue arises during a factory reset operation performed over the powerline interface, which inadvertently allows unauthorized parties to access device configuration information. The CVSS 3.1 base score is 6.5, reflecting a medium impact primarily due to confidentiality loss without integrity or availability impact. No vendor advisory or patch information is currently available, and the vulnerability is not related to cloud services.

The vulnerability allows unauthorized disclosure of sensitive device configuration information during a factory reset via the powerline interface. This could potentially aid attackers in further targeting the device or network. There is no impact on integrity or availability, and no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit access to the powerline interface and monitor for unauthorized reset attempts. Avoid performing factory resets over untrusted networks or interfaces.