Firmware Loading Vulnerability in Panasonic IR Control Hub
CVE-2025-1073

7.5HIGH

Key Information:

Vendor

Panasonic

Status
Ir Control Hub (ir Blaster)
Vendor
CVE Published:
10 April 2025

What is CVE-2025-1073?

The Panasonic IR Control Hub allows unauthorized firmware to be loaded onto the device due to a vulnerability present in versions 1.17 and earlier. This issue necessitates physical access, making it crucial for users to implement security measures to prevent unauthorized personnel from accessing the device.

Affected Version(s)

IR Control Hub (IR Blaster) 1.17 and earlier

References

https://lsin.panasonic.com/release-notes

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sharvan Singh
.