9347 matches found
CVE-2025-1073
Panasonic IR Control Hub IR Blaster versions 1.17 and earlier may allow an attacker with physical access to load unauthorized firmware onto the device...
CVE-2025-1073
Panasonic IR Control Hub IR Blaster versions 1.17 and earlier may allow an attacker with physical access to load unauthorized firmware onto the device...
CVE-2025-1073
Panasonic IR Control Hub (IR Blaster) versions 1.17 and earlier are affected. A vulnerability allows a physical-access attacker to load unauthorized firmware onto the device. Red Hat, JVN, and CVE records describe that the boot process verifies the firmware hash but continues booting with unauthe...
CVE-2025-1073
Panasonic IR Control Hub IR Blaster versions 1.17 and earlier may allow an attacker with physical access to load unauthorized firmware onto the device...
CVE-2025-20939
Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices...
Panasonic IR Control Hub 安全漏洞
Panasonic IR Control Hub is an infrared control center from Panasonic Corporation Panasonic, Japan. A security vulnerability exists in Panasonic IR Control Hub version 1.17 and earlier, which originates from a physical access attacker who can load unauthorized firmware...
PT-2025-15970 · Panasonic · Panasonic Ir Control Hub
Name of the Vulnerable Software and Affected Versions: Panasonic IR Control Hub IR Blaster versions 1.17 and earlier Description: The issue allows an attacker with physical access to load unauthorized firmware onto the device. Recommendations: For versions 1.17 and earlier, update to a version...
CVE-2025-2441
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could lead to loss of confidentiality when a malicious user, having physical access, sets the radio in factory default mode where the product does not correctly initialize all data...
CVE-2025-2440
CWE-922: Insecure Storage of Sensitive Information vulnerability exists that could potentially lead to unauthorized access of confidential data when a malicious user, having physical access and advanced information on the file system, sets the radio in factory default mode...
CVE-2025-2442
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could potentially lead to unauthorized access which could result in the loss of confidentially, integrity and availability when a malicious user, having physical access, sets the radio to the factory default...
CVE-2025-2441
CWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could lead to loss of confidentiality when a malicious user, having physical access, sets the radio in factory default mode where the product does not correctly initialize all data...
CVE-2025-2441
CVE-2025-2441 affects Schneider Electric Trio Q Licensed Data Radio. Root cause: insecure initialization of resources when set to factory default, potentially exposing confidential data. Impact: confidentiality loss with physical access; CVSS v3.1/4.0 base scores MEDIUM. Exploitation status not d...
CVE-2025-2440
CVE-2025-2440 affects Schneider Electric Trio Q Licensed Data Radio. Affected: Trio Q radios with insecure storage that can disclose confidential data when a physical attacker sets the radio to factory default mode. Root cause: insecure storage of sensitive information; initialization/default sta...
CVE-2025-3442
This vulnerability exists in TP-Link Tapo H200 V1 IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the...
CVE-2025-3442
The CVE-2025-3442 case concerns TP-Link Tapo H200 V1 IoT Smart Hub. Affected component: device firmware storing Wi‑Fi credentials in plaintext. Root cause: credentials are stored unencrypted within the firmware binary, enabling disclosure if the firmware is extracted. Impact: attacker with physic...
CVE-2025-20658
In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID:...
CVE-2025-20656
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09625423...
PT-2025-15675 · Tp Link · Tp-Link Tapo C200
Name of the Vulnerable Software and Affected Versions: TP-Link Tapo H200 V1 IoT Smart Hub version V1 Description: The issue arises from the storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and...
