An unauthenticated firmware-exchange race can bypass validation and potentially run unauthorized controller code.

Default exposure, reliable stock-hardware exploitation, and execution privilege remain unknown.