CVE-2025-1073

Published: Apr 10, 2025Modified: Jun 17, 2026Deferred

7.5

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Exploitability: 0.9 / Impact: 6.0

Source: product-security@gg.jp.panasonic.com (Secondary)

Description

Panasonic IR Control Hub (IR Blaster) versions 1.17 and earlier may allow an attacker with physical access to load unauthorized firmware onto the device.

Related CWEs

CWE-1299

Missing Protection Mechanism for Alternate Hardware Interface

The lack of protections on alternate paths to access control-protected assets (such as unprotected shadow registers and other external facing unguarded interfaces) allows an attacker to bypass existing protections to the asset that are only performed against the primary path.

References (1)

https://lsin.panasonic.com/release-notes

Source: product-security@gg.jp.panasonic.com

Timeline

No history available yet.