{"provenance_status":"Stage snapshots are authoritative only for the inputs they record. Current service metadata is not historical assessment provenance.","assessment_snapshots":[{"id":805,"framework":"OWASP Firmware Security Testing Methodology","evaluated_at":"2026-10-10T06:55:41.488340Z","score":0.6870748299319728,"assessment_context":{"score":0.6870748299319728,"counts":{"FAIL":17,"PASS":29,"WAIVED":0,"PARTIAL":0,"NOT_ASSESSED":1,"MANUAL_REVIEW":0,"NOT_APPLICABLE":0,"EVIDENCE_SUBMITTED":0},"coverage":{"checks_total":64,"checks_graded":46,"checks_assessed":47,"categories_total":9,"categories_assessed":7},"timezone":"UTC","numerator":606,"denominator":882,"firmware_id":97,"evaluated_at":"2026-10-10T06:55:41.488340+00:00","assessment_id":"881cb8d4-2fa0-4fd5-9831-feacc94e39cb:owasp_fstm","check_results":{"TC-ATK-01":"PASS","TC-ATK-02":"PASS","TC-ATK-03":"FAIL","TC-ATK-04":"FAIL","TC-ATK-06":"PASS","TC-ATK-08":"PASS","TC-ATK-09":"FAIL","TC-ATK-10":"PASS","TC-ATK-11":"PASS","TC-ATK-12":"FAIL","TC-BIN-01":"FAIL","TC-BIN-02":"PASS","TC-BIN-03":"FAIL","TC-BIN-04":"PASS","TC-BIN-05":"FAIL","TC-BIN-06":"PASS","TC-CVE-01":"PASS","TC-CVE-02":"FAIL","TC-CVE-03":"PASS","TC-CVE-05":"PASS","TC-CVE-06":"FAIL","TC-CVE-07":"PASS","TC-CVE-08":"FAIL","TC-CVE-09":"PASS","TC-RUN-01":"PASS","TC-RUN-02":"PASS","TC-CODE-01":"FAIL","TC-CODE-02":"PASS","TC-CODE-03":"PASS","TC-CODE-04":"FAIL","TC-CRED-01":"PASS","TC-CRED-03":"PASS","TC-CRED-04":"PASS","TC-CRED-05":"PASS","TC-CRED-06":"PASS","TC-CRED-07":"FAIL","TC-CRYPTO-01":"FAIL","TC-CRYPTO-02":"PASS","TC-CRYPTO-03":"FAIL","TC-CRYPTO-04":"PASS","TC-CRYPTO-05":"PASS","TC-CRYPTO-06":"FAIL","TC-CRYPTO-07":"NOT_ASSESSED","TC-CRYPTO-08":"PASS","TC-CRYPTO-09":"FAIL","TC-CRYPTO-10":"PASS","TC-CRYPTO-11":"PASS"},"framework_key":"owasp_fstm","mapping_sha256":"956eb0935b02c7c7606fa0cafd2b9467e1ef9388737de645513f89bdb9ef5881","profile_sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","scoring_caveat":null,"scoring_method":"severity-weighted-assessed-controls-v1","provenance_note":"Scoring, profile and available stage snapshot. Static detector/feed artifact identities remain unrecorded unless supplied by their originating stage; current feeds cannot reconstruct them.","manual_decisions":[],"mapping_snapshot":{"TC-ATK-01":{"id":"TC-ATK-01","name":"Telnet service detection","phase":1,"category":"Attack_Surface","severity":"CRITICAL","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"Telnet absent or explicitly disabled"},"TC-ATK-02":{"id":"TC-ATK-02","name":"FTP service detection","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"No FTP service enabled"},"TC-ATK-03":{"id":"TC-ATK-03","name":"Debug tool presence","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-6"},"pass_condition":"No debug tools in filesystem"},"TC-ATK-04":{"id":"TC-ATK-04","name":"UART debug shell detection","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-4"},"pass_condition":"No UART shell spawned at boot"},"TC-ATK-05":{"id":"TC-ATK-05","name":"Unnecessary network services","phase":2,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(g)","un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"All enabled services functionally justified"},"TC-ATK-06":{"id":"TC-ATK-06","name":"Web interface privilege check","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-7"},"pass_condition":"Web server runs as non-root user"},"TC-ATK-07":{"id":"TC-ATK-07","name":"Vulnerability disclosure policy presence","phase":3,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"fda_524b":"(b)(2)","iso_21434":"8.3","tec_31318":"3.2","en_18031_1":"GEC-2","iec_81001_5_1":"6.2","etsi_en_303_645":"5.2-1"},"pass_condition":"RFC 9116 security.txt found in the firmware filesystem"},"TC-ATK-08":{"id":"TC-ATK-08","name":"Brute-force protection on network authentication","phase":1,"category":"Attack_Surface","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","fda_524b":"(b)(2)","iec_62443":"CR 1.11","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-5"},"pass_condition":"A rate limit, lockout or retry counter protects every network authentication surface the firmware exposes"},"TC-ATK-09":{"id":"TC-ATK-09","name":"Pre-authentication information disclosure","phase":1,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(k)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.1, 3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-2"},"pass_condition":"No banner presented before authentication names the product and its firmware version"},"TC-ATK-10":{"id":"TC-ATK-10","name":"Redundant root-privileged account","phase":1,"category":"Attack_Surface","severity":"CRITICAL","frameworks":{"fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-7"},"pass_condition":"root is the only account with UID 0; every other account has its own non-zero UID"},"TC-ATK-11":{"id":"TC-ATK-11","name":"Security event logging present","phase":1,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(m)","fda_524b":"(b)(2)","iec_62443":"CR 6.1","iso_21434":"10.4.2","tec_31318":"3.10","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_800_193":"4.1.4"},"pass_condition":"The firmware ships a logging facility and starts it, so authentication, configuration and update events are recorded"},"TC-ATK-12":{"id":"TC-ATK-12","name":"Management interface served over cleartext HTTP","phase":1,"category":"Attack_Surface","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(2)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5-1"},"pass_condition":"Every web management interface is served over TLS; no HTTP listener without an HTTPS counterpart"},"TC-BIN-01":{"id":"TC-BIN-01","name":"Stack canary detection","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Stack canaries present in critical binaries"},"TC-BIN-02":{"id":"TC-BIN-02","name":"NX/DEP bit verification","phase":3,"category":"Binary_Hardening","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"GNU_STACK segment is non-executable"},"TC-BIN-03":{"id":"TC-BIN-03","name":"PIE/ASLR verification","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Critical binaries compiled as ET_DYN (PIE enabled)"},"TC-BIN-04":{"id":"TC-BIN-04","name":"RELRO configuration","phase":3,"category":"Binary_Hardening","severity":"LOW","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Full RELRO enabled (RELRO + BIND_NOW)"},"TC-BIN-05":{"id":"TC-BIN-05","name":"Debug symbol stripping","phase":3,"category":"Binary_Hardening","severity":"LOW","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"No debug sections in production binaries"},"TC-BIN-06":{"id":"TC-BIN-06","name":"Insecure RPATH/RUNPATH","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"No RPATH/RUNPATH with relative or world-writable paths"},"TC-CVE-01":{"id":"TC-CVE-01","name":"OS and kernel CVE scan","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CVEs with CVSS >= 7.0 for detected OS/kernel version"},"TC-CVE-02":{"id":"TC-CVE-02","name":"BusyBox CVE scan","phase":3,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","etsi_en_303_645":"5.3"},"pass_condition":"BusyBox has no CVEs with CVSS >= 7.0"},"TC-CVE-03":{"id":"TC-CVE-03","name":"TLS library CVE check","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","etsi_en_303_645":"5.3"},"pass_condition":"TLS library has no CVEs with CVSS >= 7.0"},"TC-CVE-04":{"id":"TC-CVE-04","name":"SBOM generation","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","fda_524b":"(b)(3)","iso_21434":"8.5, 8.6","tec_31318":"3.3","iec_81001_5_1":"5.2.4","nist_ir_8259a":"Capability 6","etsi_en_303_645":"5.3"},"pass_condition":"SBOM generated covering >80% of identified binary components"},"TC-CVE-05":{"id":"TC-CVE-05","name":"Known vulnerable binary hash match","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.6 (22)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1"},"pass_condition":"No hash matches against known malicious binary database"},"TC-CVE-06":{"id":"TC-CVE-06","name":"Firmware-wide critical CVE presence","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CRITICAL-severity CVE findings anywhere in the firmware image"},"TC-CVE-07":{"id":"TC-CVE-07","name":"CVE regression from prior firmware version","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1"},"pass_condition":"No new CVE introduced relative to the prior analyzed version of this firmware"},"TC-CVE-08":{"id":"TC-CVE-08","name":"Any component has a HIGH-or-above or known-exploited CVE","phase":1,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CVE with CVSS >= 7.0, and no CISA-KEV-listed CVE, in any component"},"TC-CVE-09":{"id":"TC-CVE-09","name":"End-of-life component in the SBOM","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No SBOM component is past its upstream end of life (engine/intelligence/eol_components.py's dated support table)"},"TC-RUN-01":{"id":"TC-RUN-01","name":"Memory-safety fault under adversarial input","phase":2,"category":"Runtime_Behaviour","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 7","etsi_en_303_645":"5.13-1"},"pass_condition":"No memory-safety fault (SIGSEGV/SIGBUS/SIGILL, or a libc hardening abort) was reproduced while emulating this firmware's binaries with adversarial argv, environment or stdin"},"TC-RUN-02":{"id":"TC-RUN-02","name":"Sandbox network service and process execution observed","phase":2,"category":"Runtime_Behaviour","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 7","etsi_en_303_645":"5.13-1"},"pass_condition":"No binary was observed both serving a listening socket and executing an external program or shell interpreter in the same emulated run"},"TC-UPD-01":{"id":"TC-UPD-01","name":"Update signature verification presence","phase":1,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.2","iec_81001_5_1":"7.2","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3-9, 5.3-10"},"pass_condition":"Signature verification present (RSA-2048+, ECDSA P-256+, Ed25519)"},"TC-UPD-02":{"id":"TC-UPD-02","name":"Update channel encryption","phase":2,"category":"Firmware_Update","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","iec_81001_5_1":"7.2","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3-2, 5.3-7"},"pass_condition":"All update URLs use HTTPS; TLS library present in update handler"},"TC-UPD-03":{"id":"TC-UPD-03","name":"Rollback protection","phase":3,"category":"Firmware_Update","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.3","iec_81001_5_1":"7.2"},"pass_condition":"Version comparison logic present that rejects older versions"},"TC-UPD-04":{"id":"TC-UPD-04","name":"Pre-installation integrity check","phase":2,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.2","iec_81001_5_1":"7.2","etsi_en_303_645":"5.3-9"},"pass_condition":"Hash verification call present before any flash write"},"TC-UPD-05":{"id":"TC-UPD-05","name":"Unsigned update rejection","phase":1,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.1","iec_81001_5_1":"7.2"},"pass_condition":"All code paths after signature failure lead to abort"},"TC-BOOT-01":{"id":"TC-BOOT-01","name":"Bootloader signature verification","phase":1,"category":"Secure_Boot","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(j)","un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.1.1","etsi_en_303_645":"5.7-1"},"pass_condition":"Signature verification present in bootloader"},"TC-BOOT-02":{"id":"TC-BOOT-02","name":"Boot measurement capability","phase":3,"category":"Secure_Boot","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.2.3"},"pass_condition":"TPM driver or IMA configuration present"},"TC-BOOT-03":{"id":"TC-BOOT-03","name":"Recovery partition presence","phase":3,"category":"Secure_Boot","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 3","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.9","en_18031_1":"RLM-1","nist_800_193":"4.3.1"},"pass_condition":"Recovery partition or dual-bank mechanism identified"},"TC-BOOT-04":{"id":"TC-BOOT-04","name":"Runtime integrity verification","phase":3,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(j)","un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.2.1","etsi_en_303_645":"5.7-1"},"pass_condition":"Integrity hash computed and verified at boot"},"TC-BOOT-05":{"id":"TC-BOOT-05","name":"No published test keys in Secure Boot databases","phase":1,"category":"Secure_Boot","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(j)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","en_18031_1":"RLM-1","nist_800_193":"4.1.1","etsi_en_303_645":"5.7-1"},"pass_condition":"No PK, KEK or db certificate is a published test key (PKfail)"},"TC-BOOT-06":{"id":"TC-BOOT-06","name":"Secure Boot revocation list (dbx) current","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(j)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","en_18031_1":"RLM-1","nist_800_193":"4.1.1"},"pass_condition":"dbx carries the published revocations"},"TC-BOOT-07":{"id":"TC-BOOT-07","name":"No firmware module with a published vulnerability","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(a)","fda_524b":"(b)(1)","iso_21434":"10.4.1","en_18031_1":"RLM-1"},"pass_condition":"No module matches a vulnerable advisory entry"},"TC-BOOT-08":{"id":"TC-BOOT-08","name":"No SMM callouts","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(a)","fda_524b":"(b)(1)","iso_21434":"10.4.1","en_18031_1":"RLM-1"},"pass_condition":"SMI handlers call no Boot or Runtime Services"},"TC-CODE-01":{"id":"TC-CODE-01","name":"Command or code injection in shipped scripts","phase":1,"category":"Code_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script passes externally-influenced data into a shell, an exec call or a code-evaluation construct (CWE-78, CWE-88, CWE-94, CWE-95)"},"TC-CODE-02":{"id":"TC-CODE-02","name":"Untrusted input rendered by the device web interface","phase":1,"category":"Code_Security","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No page served by the device writes externally-influenced data into the DOM without escaping it (CWE-79)"},"TC-CODE-03":{"id":"TC-CODE-03","name":"Untrusted input selects a file path","phase":1,"category":"Code_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script uses externally-influenced data to choose a file to read, write or include (CWE-22, CWE-98)"},"TC-CODE-04":{"id":"TC-CODE-04","name":"Untrusted data parsed by an interpreter or database","phase":1,"category":"Code_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script deserializes externally-influenced data or builds a database query from it (CWE-502, CWE-89)"},"TC-CRED-01":{"id":"TC-CRED-01","name":"Hardcoded credential detection","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-1"},"pass_condition":"No hardcoded credential pairs found"},"TC-CRED-02":{"id":"TC-CRED-02","name":"Default credential database match","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(a)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.1","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 2","etsi_en_303_645":"5.1-1, 5.1-2"},"pass_condition":"No matches against default credential database"},"TC-CRED-03":{"id":"TC-CRED-03","name":"Password hash strength assessment","phase":3,"category":"Credential_Security","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-1"},"pass_condition":"All hashes use SHA-512 ($6$) or yescrypt ($y$) minimum"},"TC-CRED-04":{"id":"TC-CRED-04","name":"API key and token detection","phase":3,"category":"Credential_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2"},"pass_condition":"No API keys or tokens detected"},"TC-CRED-05":{"id":"TC-CRED-05","name":"Embedded private key detection","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.6 (19.3)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-3"},"pass_condition":"No private keys found"},"TC-CRED-06":{"id":"TC-CRED-06","name":"Credentials stored in clear text on the device","phase":1,"category":"Credential_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(c)","un_r155":"Annex 5 Part A 4.3.6 (19)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-1"},"pass_condition":"No configuration file on the device holds a password, key or token as a literal value rather than a hash, reference or encrypted blob"},"TC-CRED-07":{"id":"TC-CRED-07","name":"Account with no password set","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-1"},"pass_condition":"No account in the device's credential databases has an empty password field"},"TC-CRYPTO-01":{"id":"TC-CRYPTO-01","name":"MD5 usage in security context","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"MD5 absent from security-critical code paths"},"TC-CRYPTO-02":{"id":"TC-CRYPTO-02","name":"SHA-1 usage in security context","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"SHA-1 absent from security-critical code paths"},"TC-CRYPTO-03":{"id":"TC-CRYPTO-03","name":"Deprecated cipher detection (DES/3DES/RC4)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No use of DES, 3DES, or RC4 detected"},"TC-CRYPTO-04":{"id":"TC-CRYPTO-04","name":"RSA key length validation","phase":3,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2"},"pass_condition":"All RSA keys are 2048 bits or larger"},"TC-CRYPTO-05":{"id":"TC-CRYPTO-05","name":"TLS version enforcement","phase":3,"category":"Cryptography","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"Only TLS 1.2 and 1.3 enabled"},"TC-CRYPTO-06":{"id":"TC-CRYPTO-06","name":"Certificate validation","phase":3,"category":"Cryptography","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"No self-signed certs in production; no expired certs"},"TC-CRYPTO-07":{"id":"TC-CRYPTO-07","name":"Hardcoded IV/salt detection","phase":3,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2"},"pass_condition":"IVs and salts are generated dynamically"},"TC-CRYPTO-08":{"id":"TC-CRYPTO-08","name":"Deprecated SSL protocol versions (SSLv2/SSLv3)","phase":2,"category":"Cryptography","severity":"CRITICAL","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"No SSLv2 or SSLv3 protocol support detected"},"TC-CRYPTO-09":{"id":"TC-CRYPTO-09","name":"Broken hash algorithm (MD4)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"MD4 absent from security-critical code paths"},"TC-CRYPTO-10":{"id":"TC-CRYPTO-10","name":"Weak or null cipher (RC2, null cipher suite)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No RC2 or null cipher suite detected"},"TC-CRYPTO-11":{"id":"TC-CRYPTO-11","name":"ECB block-cipher mode","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No ECB mode encryption detected"}},"profile_snapshot":null,"severity_weights":{"LOW":1,"HIGH":15,"MEDIUM":5,"CRITICAL":40},"framework_version":"1.0","environment_artifact":null,"input_stage_versions":{"runtime":{"status":"complete","public_id":"d9e47ccd-8534-43f3-8e55-05a1dbbccf75","completed_at":"2026-10-10 06:55:27.192525+00:00","assessment_context":{"mode":"tier1","scope":"Recorded emulation inputs; deployed-device reachability unassessed","tier2":null,"run_id":32,"engine_build":"unknown","fuzz_complete":true,"execution_profile":{"crash_probe":true,"daemon_probe":"no-arguments","fuzz_enabled":false,"fuzz_seconds":0,"fuzz_targets":0,"max_binaries":0,"baseline_argv":["--help"],"fuzz_executions":1200,"timeout_seconds":5,"max_crash_probes":0,"max_fuzz_targets":0,"run_budget_seconds":2400,"mcu_run_timeout_seconds":30,"esp_boot_timeout_seconds":45},"crash_probe_complete":true,"environment_artifact":null,"fuzz_targets_available":0,"target_selection_complete":true}},"source_scan":{"status":"complete","findings":56,"truncated":null,"files_found":116,"completed_at":"2026-10-10T06:46:54.176998+00:00","assessment_id":"23d691cb-de7e-4d36-a5a0-4a5a94978278","files_scanned":116,"engine_artifact":null,"provenance_note":"Configured sandbox artifact digest; unknown if not supplied.","orchestrator_build":"unknown"},"firmware_sha256":"00bd253bfce5ea2d87c430dbbddc21528757b059d5b67b57b8f31397ddc7abbb"},"scoring_engine_build":"unknown","scored_on_partial_read":false,"automated_check_results":{"TC-ATK-01":"PASS","TC-ATK-02":"PASS","TC-ATK-03":"FAIL","TC-ATK-04":"FAIL","TC-ATK-06":"PASS","TC-ATK-08":"PASS","TC-ATK-09":"FAIL","TC-ATK-10":"PASS","TC-ATK-11":"PASS","TC-ATK-12":"FAIL","TC-BIN-01":"FAIL","TC-BIN-02":"PASS","TC-BIN-03":"FAIL","TC-BIN-04":"PASS","TC-BIN-05":"FAIL","TC-BIN-06":"PASS","TC-CVE-01":"PASS","TC-CVE-02":"FAIL","TC-CVE-03":"PASS","TC-CVE-05":"PASS","TC-CVE-06":"FAIL","TC-CVE-07":"PASS","TC-CVE-08":"FAIL","TC-CVE-09":"PASS","TC-RUN-01":"PASS","TC-RUN-02":"PASS","TC-CODE-01":"FAIL","TC-CODE-02":"PASS","TC-CODE-03":"PASS","TC-CODE-04":"FAIL","TC-CRED-01":"PASS","TC-CRED-03":"PASS","TC-CRED-04":"PASS","TC-CRED-05":"PASS","TC-CRED-06":"PASS","TC-CRED-07":"FAIL","TC-CRYPTO-01":"FAIL","TC-CRYPTO-02":"PASS","TC-CRYPTO-03":"FAIL","TC-CRYPTO-04":"PASS","TC-CRYPTO-05":"PASS","TC-CRYPTO-06":"FAIL","TC-CRYPTO-07":"NOT_ASSESSED","TC-CRYPTO-08":"PASS","TC-CRYPTO-09":"FAIL","TC-CRYPTO-10":"PASS","TC-CRYPTO-11":"PASS"}}},{"id":804,"framework":"ETSI EN 303 645","evaluated_at":"2026-10-10T06:55:41.488340Z","score":0.6404494382022472,"assessment_context":{"score":0.6404494382022472,"counts":{"FAIL":16,"PASS":25,"WAIVED":0,"PARTIAL":0,"NOT_ASSESSED":3,"MANUAL_REVIEW":0,"NOT_APPLICABLE":1,"EVIDENCE_SUBMITTED":0},"coverage":{"checks_total":64,"checks_graded":41,"checks_assessed":45,"categories_total":9,"categories_assessed":8},"timezone":"UTC","numerator":570,"denominator":890,"firmware_id":97,"evaluated_at":"2026-10-10T06:55:41.488340+00:00","assessment_id":"881cb8d4-2fa0-4fd5-9831-feacc94e39cb:etsi_en_303_645","check_results":{"TC-ATK-01":"PASS","TC-ATK-02":"PASS","TC-ATK-03":"FAIL","TC-ATK-04":"FAIL","TC-ATK-05":"PASS","TC-ATK-06":"PASS","TC-ATK-07":"NOT_ASSESSED","TC-ATK-08":"PASS","TC-ATK-09":"FAIL","TC-ATK-10":"PASS","TC-ATK-12":"FAIL","TC-CVE-01":"PASS","TC-CVE-02":"FAIL","TC-CVE-03":"PASS","TC-CVE-04":"PASS","TC-CVE-06":"FAIL","TC-CVE-08":"FAIL","TC-CVE-09":"PASS","TC-RUN-01":"PASS","TC-RUN-02":"PASS","TC-UPD-01":"FAIL","TC-UPD-02":"PASS","TC-UPD-04":"NOT_ASSESSED","TC-BOOT-01":"NOT_ASSESSED","TC-BOOT-04":"FAIL","TC-BOOT-05":"NOT_APPLICABLE","TC-CODE-01":"FAIL","TC-CODE-02":"PASS","TC-CODE-03":"PASS","TC-CODE-04":"FAIL","TC-CRED-01":"PASS","TC-CRED-02":"PASS","TC-CRED-03":"PASS","TC-CRED-05":"PASS","TC-CRED-06":"PASS","TC-CRED-07":"FAIL","TC-CRYPTO-01":"FAIL","TC-CRYPTO-02":"PASS","TC-CRYPTO-03":"FAIL","TC-CRYPTO-05":"PASS","TC-CRYPTO-06":"FAIL","TC-CRYPTO-08":"PASS","TC-CRYPTO-09":"FAIL","TC-CRYPTO-10":"PASS","TC-CRYPTO-11":"PASS"},"framework_key":"etsi_en_303_645","mapping_sha256":"956eb0935b02c7c7606fa0cafd2b9467e1ef9388737de645513f89bdb9ef5881","profile_sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","scoring_caveat":null,"scoring_method":"severity-weighted-assessed-controls-v1","provenance_note":"Scoring, profile and available stage snapshot. Static detector/feed artifact identities remain unrecorded unless supplied by their originating stage; current feeds cannot reconstruct them.","manual_decisions":[],"mapping_snapshot":{"TC-ATK-01":{"id":"TC-ATK-01","name":"Telnet service detection","phase":1,"category":"Attack_Surface","severity":"CRITICAL","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"Telnet absent or explicitly disabled"},"TC-ATK-02":{"id":"TC-ATK-02","name":"FTP service detection","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"No FTP service enabled"},"TC-ATK-03":{"id":"TC-ATK-03","name":"Debug tool presence","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-6"},"pass_condition":"No debug tools in filesystem"},"TC-ATK-04":{"id":"TC-ATK-04","name":"UART debug shell detection","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-4"},"pass_condition":"No UART shell spawned at boot"},"TC-ATK-05":{"id":"TC-ATK-05","name":"Unnecessary network services","phase":2,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(g)","un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"All enabled services functionally justified"},"TC-ATK-06":{"id":"TC-ATK-06","name":"Web interface privilege check","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-7"},"pass_condition":"Web server runs as non-root user"},"TC-ATK-07":{"id":"TC-ATK-07","name":"Vulnerability disclosure policy presence","phase":3,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"fda_524b":"(b)(2)","iso_21434":"8.3","tec_31318":"3.2","en_18031_1":"GEC-2","iec_81001_5_1":"6.2","etsi_en_303_645":"5.2-1"},"pass_condition":"RFC 9116 security.txt found in the firmware filesystem"},"TC-ATK-08":{"id":"TC-ATK-08","name":"Brute-force protection on network authentication","phase":1,"category":"Attack_Surface","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","fda_524b":"(b)(2)","iec_62443":"CR 1.11","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-5"},"pass_condition":"A rate limit, lockout or retry counter protects every network authentication surface the firmware exposes"},"TC-ATK-09":{"id":"TC-ATK-09","name":"Pre-authentication information disclosure","phase":1,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(k)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.1, 3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-2"},"pass_condition":"No banner presented before authentication names the product and its firmware version"},"TC-ATK-10":{"id":"TC-ATK-10","name":"Redundant root-privileged account","phase":1,"category":"Attack_Surface","severity":"CRITICAL","frameworks":{"fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-7"},"pass_condition":"root is the only account with UID 0; every other account has its own non-zero UID"},"TC-ATK-11":{"id":"TC-ATK-11","name":"Security event logging present","phase":1,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(m)","fda_524b":"(b)(2)","iec_62443":"CR 6.1","iso_21434":"10.4.2","tec_31318":"3.10","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_800_193":"4.1.4"},"pass_condition":"The firmware ships a logging facility and starts it, so authentication, configuration and update events are recorded"},"TC-ATK-12":{"id":"TC-ATK-12","name":"Management interface served over cleartext HTTP","phase":1,"category":"Attack_Surface","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(2)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5-1"},"pass_condition":"Every web management interface is served over TLS; no HTTP listener without an HTTPS counterpart"},"TC-BIN-01":{"id":"TC-BIN-01","name":"Stack canary detection","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Stack canaries present in critical binaries"},"TC-BIN-02":{"id":"TC-BIN-02","name":"NX/DEP bit verification","phase":3,"category":"Binary_Hardening","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"GNU_STACK segment is non-executable"},"TC-BIN-03":{"id":"TC-BIN-03","name":"PIE/ASLR verification","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Critical binaries compiled as ET_DYN (PIE enabled)"},"TC-BIN-04":{"id":"TC-BIN-04","name":"RELRO configuration","phase":3,"category":"Binary_Hardening","severity":"LOW","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Full RELRO enabled (RELRO + BIND_NOW)"},"TC-BIN-05":{"id":"TC-BIN-05","name":"Debug symbol stripping","phase":3,"category":"Binary_Hardening","severity":"LOW","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"No debug sections in production binaries"},"TC-BIN-06":{"id":"TC-BIN-06","name":"Insecure RPATH/RUNPATH","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"No RPATH/RUNPATH with relative or world-writable paths"},"TC-CVE-01":{"id":"TC-CVE-01","name":"OS and kernel CVE scan","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CVEs with CVSS >= 7.0 for detected OS/kernel version"},"TC-CVE-02":{"id":"TC-CVE-02","name":"BusyBox CVE scan","phase":3,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","etsi_en_303_645":"5.3"},"pass_condition":"BusyBox has no CVEs with CVSS >= 7.0"},"TC-CVE-03":{"id":"TC-CVE-03","name":"TLS library CVE check","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","etsi_en_303_645":"5.3"},"pass_condition":"TLS library has no CVEs with CVSS >= 7.0"},"TC-CVE-04":{"id":"TC-CVE-04","name":"SBOM generation","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","fda_524b":"(b)(3)","iso_21434":"8.5, 8.6","tec_31318":"3.3","iec_81001_5_1":"5.2.4","nist_ir_8259a":"Capability 6","etsi_en_303_645":"5.3"},"pass_condition":"SBOM generated covering >80% of identified binary components"},"TC-CVE-05":{"id":"TC-CVE-05","name":"Known vulnerable binary hash match","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.6 (22)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1"},"pass_condition":"No hash matches against known malicious binary database"},"TC-CVE-06":{"id":"TC-CVE-06","name":"Firmware-wide critical CVE presence","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CRITICAL-severity CVE findings anywhere in the firmware image"},"TC-CVE-07":{"id":"TC-CVE-07","name":"CVE regression from prior firmware version","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1"},"pass_condition":"No new CVE introduced relative to the prior analyzed version of this firmware"},"TC-CVE-08":{"id":"TC-CVE-08","name":"Any component has a HIGH-or-above or known-exploited CVE","phase":1,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CVE with CVSS >= 7.0, and no CISA-KEV-listed CVE, in any component"},"TC-CVE-09":{"id":"TC-CVE-09","name":"End-of-life component in the SBOM","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No SBOM component is past its upstream end of life (engine/intelligence/eol_components.py's dated support table)"},"TC-RUN-01":{"id":"TC-RUN-01","name":"Memory-safety fault under adversarial input","phase":2,"category":"Runtime_Behaviour","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 7","etsi_en_303_645":"5.13-1"},"pass_condition":"No memory-safety fault (SIGSEGV/SIGBUS/SIGILL, or a libc hardening abort) was reproduced while emulating this firmware's binaries with adversarial argv, environment or stdin"},"TC-RUN-02":{"id":"TC-RUN-02","name":"Sandbox network service and process execution observed","phase":2,"category":"Runtime_Behaviour","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 7","etsi_en_303_645":"5.13-1"},"pass_condition":"No binary was observed both serving a listening socket and executing an external program or shell interpreter in the same emulated run"},"TC-UPD-01":{"id":"TC-UPD-01","name":"Update signature verification presence","phase":1,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.2","iec_81001_5_1":"7.2","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3-9, 5.3-10"},"pass_condition":"Signature verification present (RSA-2048+, ECDSA P-256+, Ed25519)"},"TC-UPD-02":{"id":"TC-UPD-02","name":"Update channel encryption","phase":2,"category":"Firmware_Update","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","iec_81001_5_1":"7.2","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3-2, 5.3-7"},"pass_condition":"All update URLs use HTTPS; TLS library present in update handler"},"TC-UPD-03":{"id":"TC-UPD-03","name":"Rollback protection","phase":3,"category":"Firmware_Update","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.3","iec_81001_5_1":"7.2"},"pass_condition":"Version comparison logic present that rejects older versions"},"TC-UPD-04":{"id":"TC-UPD-04","name":"Pre-installation integrity check","phase":2,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.2","iec_81001_5_1":"7.2","etsi_en_303_645":"5.3-9"},"pass_condition":"Hash verification call present before any flash write"},"TC-UPD-05":{"id":"TC-UPD-05","name":"Unsigned update rejection","phase":1,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.1","iec_81001_5_1":"7.2"},"pass_condition":"All code paths after signature failure lead to abort"},"TC-BOOT-01":{"id":"TC-BOOT-01","name":"Bootloader signature verification","phase":1,"category":"Secure_Boot","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(j)","un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.1.1","etsi_en_303_645":"5.7-1"},"pass_condition":"Signature verification present in bootloader"},"TC-BOOT-02":{"id":"TC-BOOT-02","name":"Boot measurement capability","phase":3,"category":"Secure_Boot","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.2.3"},"pass_condition":"TPM driver or IMA configuration present"},"TC-BOOT-03":{"id":"TC-BOOT-03","name":"Recovery partition presence","phase":3,"category":"Secure_Boot","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 3","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.9","en_18031_1":"RLM-1","nist_800_193":"4.3.1"},"pass_condition":"Recovery partition or dual-bank mechanism identified"},"TC-BOOT-04":{"id":"TC-BOOT-04","name":"Runtime integrity verification","phase":3,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(j)","un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.2.1","etsi_en_303_645":"5.7-1"},"pass_condition":"Integrity hash computed and verified at boot"},"TC-BOOT-05":{"id":"TC-BOOT-05","name":"No published test keys in Secure Boot databases","phase":1,"category":"Secure_Boot","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(j)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","en_18031_1":"RLM-1","nist_800_193":"4.1.1","etsi_en_303_645":"5.7-1"},"pass_condition":"No PK, KEK or db certificate is a published test key (PKfail)"},"TC-BOOT-06":{"id":"TC-BOOT-06","name":"Secure Boot revocation list (dbx) current","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(j)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","en_18031_1":"RLM-1","nist_800_193":"4.1.1"},"pass_condition":"dbx carries the published revocations"},"TC-BOOT-07":{"id":"TC-BOOT-07","name":"No firmware module with a published vulnerability","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(a)","fda_524b":"(b)(1)","iso_21434":"10.4.1","en_18031_1":"RLM-1"},"pass_condition":"No module matches a vulnerable advisory entry"},"TC-BOOT-08":{"id":"TC-BOOT-08","name":"No SMM callouts","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(a)","fda_524b":"(b)(1)","iso_21434":"10.4.1","en_18031_1":"RLM-1"},"pass_condition":"SMI handlers call no Boot or Runtime Services"},"TC-CODE-01":{"id":"TC-CODE-01","name":"Command or code injection in shipped scripts","phase":1,"category":"Code_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script passes externally-influenced data into a shell, an exec call or a code-evaluation construct (CWE-78, CWE-88, CWE-94, CWE-95)"},"TC-CODE-02":{"id":"TC-CODE-02","name":"Untrusted input rendered by the device web interface","phase":1,"category":"Code_Security","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No page served by the device writes externally-influenced data into the DOM without escaping it (CWE-79)"},"TC-CODE-03":{"id":"TC-CODE-03","name":"Untrusted input selects a file path","phase":1,"category":"Code_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script uses externally-influenced data to choose a file to read, write or include (CWE-22, CWE-98)"},"TC-CODE-04":{"id":"TC-CODE-04","name":"Untrusted data parsed by an interpreter or database","phase":1,"category":"Code_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script deserializes externally-influenced data or builds a database query from it (CWE-502, CWE-89)"},"TC-CRED-01":{"id":"TC-CRED-01","name":"Hardcoded credential detection","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-1"},"pass_condition":"No hardcoded credential pairs found"},"TC-CRED-02":{"id":"TC-CRED-02","name":"Default credential database match","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(a)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.1","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 2","etsi_en_303_645":"5.1-1, 5.1-2"},"pass_condition":"No matches against default credential database"},"TC-CRED-03":{"id":"TC-CRED-03","name":"Password hash strength assessment","phase":3,"category":"Credential_Security","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-1"},"pass_condition":"All hashes use SHA-512 ($6$) or yescrypt ($y$) minimum"},"TC-CRED-04":{"id":"TC-CRED-04","name":"API key and token detection","phase":3,"category":"Credential_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2"},"pass_condition":"No API keys or tokens detected"},"TC-CRED-05":{"id":"TC-CRED-05","name":"Embedded private key detection","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.6 (19.3)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-3"},"pass_condition":"No private keys found"},"TC-CRED-06":{"id":"TC-CRED-06","name":"Credentials stored in clear text on the device","phase":1,"category":"Credential_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(c)","un_r155":"Annex 5 Part A 4.3.6 (19)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-1"},"pass_condition":"No configuration file on the device holds a password, key or token as a literal value rather than a hash, reference or encrypted blob"},"TC-CRED-07":{"id":"TC-CRED-07","name":"Account with no password set","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-1"},"pass_condition":"No account in the device's credential databases has an empty password field"},"TC-CRYPTO-01":{"id":"TC-CRYPTO-01","name":"MD5 usage in security context","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"MD5 absent from security-critical code paths"},"TC-CRYPTO-02":{"id":"TC-CRYPTO-02","name":"SHA-1 usage in security context","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"SHA-1 absent from security-critical code paths"},"TC-CRYPTO-03":{"id":"TC-CRYPTO-03","name":"Deprecated cipher detection (DES/3DES/RC4)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No use of DES, 3DES, or RC4 detected"},"TC-CRYPTO-04":{"id":"TC-CRYPTO-04","name":"RSA key length validation","phase":3,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2"},"pass_condition":"All RSA keys are 2048 bits or larger"},"TC-CRYPTO-05":{"id":"TC-CRYPTO-05","name":"TLS version enforcement","phase":3,"category":"Cryptography","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"Only TLS 1.2 and 1.3 enabled"},"TC-CRYPTO-06":{"id":"TC-CRYPTO-06","name":"Certificate validation","phase":3,"category":"Cryptography","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"No self-signed certs in production; no expired certs"},"TC-CRYPTO-07":{"id":"TC-CRYPTO-07","name":"Hardcoded IV/salt detection","phase":3,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2"},"pass_condition":"IVs and salts are generated dynamically"},"TC-CRYPTO-08":{"id":"TC-CRYPTO-08","name":"Deprecated SSL protocol versions (SSLv2/SSLv3)","phase":2,"category":"Cryptography","severity":"CRITICAL","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"No SSLv2 or SSLv3 protocol support detected"},"TC-CRYPTO-09":{"id":"TC-CRYPTO-09","name":"Broken hash algorithm (MD4)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"MD4 absent from security-critical code paths"},"TC-CRYPTO-10":{"id":"TC-CRYPTO-10","name":"Weak or null cipher (RC2, null cipher suite)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No RC2 or null cipher suite detected"},"TC-CRYPTO-11":{"id":"TC-CRYPTO-11","name":"ECB block-cipher mode","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No ECB mode encryption detected"}},"profile_snapshot":null,"severity_weights":{"LOW":1,"HIGH":15,"MEDIUM":5,"CRITICAL":40},"framework_version":"v2.1.1","environment_artifact":null,"input_stage_versions":{"runtime":{"status":"complete","public_id":"d9e47ccd-8534-43f3-8e55-05a1dbbccf75","completed_at":"2026-10-10 06:55:27.192525+00:00","assessment_context":{"mode":"tier1","scope":"Recorded emulation inputs; deployed-device reachability unassessed","tier2":null,"run_id":32,"engine_build":"unknown","fuzz_complete":true,"execution_profile":{"crash_probe":true,"daemon_probe":"no-arguments","fuzz_enabled":false,"fuzz_seconds":0,"fuzz_targets":0,"max_binaries":0,"baseline_argv":["--help"],"fuzz_executions":1200,"timeout_seconds":5,"max_crash_probes":0,"max_fuzz_targets":0,"run_budget_seconds":2400,"mcu_run_timeout_seconds":30,"esp_boot_timeout_seconds":45},"crash_probe_complete":true,"environment_artifact":null,"fuzz_targets_available":0,"target_selection_complete":true}},"source_scan":{"status":"complete","findings":56,"truncated":null,"files_found":116,"completed_at":"2026-10-10T06:46:54.176998+00:00","assessment_id":"23d691cb-de7e-4d36-a5a0-4a5a94978278","files_scanned":116,"engine_artifact":null,"provenance_note":"Configured sandbox artifact digest; unknown if not supplied.","orchestrator_build":"unknown"},"firmware_sha256":"00bd253bfce5ea2d87c430dbbddc21528757b059d5b67b57b8f31397ddc7abbb"},"scoring_engine_build":"unknown","scored_on_partial_read":false,"automated_check_results":{"TC-ATK-01":"PASS","TC-ATK-02":"PASS","TC-ATK-03":"FAIL","TC-ATK-04":"FAIL","TC-ATK-05":"PASS","TC-ATK-06":"PASS","TC-ATK-07":"NOT_ASSESSED","TC-ATK-08":"PASS","TC-ATK-09":"FAIL","TC-ATK-10":"PASS","TC-ATK-12":"FAIL","TC-CVE-01":"PASS","TC-CVE-02":"FAIL","TC-CVE-03":"PASS","TC-CVE-04":"PASS","TC-CVE-06":"FAIL","TC-CVE-08":"FAIL","TC-CVE-09":"PASS","TC-RUN-01":"PASS","TC-RUN-02":"PASS","TC-UPD-01":"FAIL","TC-UPD-02":"PASS","TC-UPD-04":"NOT_ASSESSED","TC-BOOT-01":"NOT_ASSESSED","TC-BOOT-04":"FAIL","TC-BOOT-05":"NOT_APPLICABLE","TC-CODE-01":"FAIL","TC-CODE-02":"PASS","TC-CODE-03":"PASS","TC-CODE-04":"FAIL","TC-CRED-01":"PASS","TC-CRED-02":"PASS","TC-CRED-03":"PASS","TC-CRED-05":"PASS","TC-CRED-06":"PASS","TC-CRED-07":"FAIL","TC-CRYPTO-01":"FAIL","TC-CRYPTO-02":"PASS","TC-CRYPTO-03":"FAIL","TC-CRYPTO-05":"PASS","TC-CRYPTO-06":"FAIL","TC-CRYPTO-08":"PASS","TC-CRYPTO-09":"FAIL","TC-CRYPTO-10":"PASS","TC-CRYPTO-11":"PASS"}}},{"id":803,"framework":"OWASP Firmware Security Testing Methodology","evaluated_at":"2026-10-10T06:53:48.329847Z","score":0.6662636033857315,"assessment_context":{"score":0.6662636033857315,"counts":{"FAIL":17,"PASS":27,"WAIVED":0,"PARTIAL":0,"NOT_ASSESSED":3,"MANUAL_REVIEW":0,"NOT_APPLICABLE":0,"EVIDENCE_SUBMITTED":0},"coverage":{"checks_total":64,"checks_graded":44,"checks_assessed":47,"categories_total":9,"categories_assessed":7},"timezone":"UTC","numerator":551,"denominator":827,"firmware_id":97,"evaluated_at":"2026-10-10T06:53:48.329847+00:00","assessment_id":"135a0909-2156-44f3-94ff-fe95417ff10e:owasp_fstm","check_results":{"TC-ATK-01":"PASS","TC-ATK-02":"PASS","TC-ATK-03":"FAIL","TC-ATK-04":"FAIL","TC-ATK-06":"PASS","TC-ATK-08":"PASS","TC-ATK-09":"FAIL","TC-ATK-10":"PASS","TC-ATK-11":"PASS","TC-ATK-12":"FAIL","TC-BIN-01":"FAIL","TC-BIN-02":"PASS","TC-BIN-03":"FAIL","TC-BIN-04":"PASS","TC-BIN-05":"FAIL","TC-BIN-06":"PASS","TC-CVE-01":"PASS","TC-CVE-02":"FAIL","TC-CVE-03":"PASS","TC-CVE-05":"PASS","TC-CVE-06":"FAIL","TC-CVE-07":"PASS","TC-CVE-08":"FAIL","TC-CVE-09":"PASS","TC-RUN-01":"NOT_ASSESSED","TC-RUN-02":"NOT_ASSESSED","TC-CODE-01":"FAIL","TC-CODE-02":"PASS","TC-CODE-03":"PASS","TC-CODE-04":"FAIL","TC-CRED-01":"PASS","TC-CRED-03":"PASS","TC-CRED-04":"PASS","TC-CRED-05":"PASS","TC-CRED-06":"PASS","TC-CRED-07":"FAIL","TC-CRYPTO-01":"FAIL","TC-CRYPTO-02":"PASS","TC-CRYPTO-03":"FAIL","TC-CRYPTO-04":"PASS","TC-CRYPTO-05":"PASS","TC-CRYPTO-06":"FAIL","TC-CRYPTO-07":"NOT_ASSESSED","TC-CRYPTO-08":"PASS","TC-CRYPTO-09":"FAIL","TC-CRYPTO-10":"PASS","TC-CRYPTO-11":"PASS"},"framework_key":"owasp_fstm","mapping_sha256":"956eb0935b02c7c7606fa0cafd2b9467e1ef9388737de645513f89bdb9ef5881","profile_sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","scoring_caveat":null,"scoring_method":"severity-weighted-assessed-controls-v1","provenance_note":"Scoring, profile and available stage snapshot. Static detector/feed artifact identities remain unrecorded unless supplied by their originating stage; current feeds cannot reconstruct them.","manual_decisions":[],"mapping_snapshot":{"TC-ATK-01":{"id":"TC-ATK-01","name":"Telnet service detection","phase":1,"category":"Attack_Surface","severity":"CRITICAL","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"Telnet absent or explicitly disabled"},"TC-ATK-02":{"id":"TC-ATK-02","name":"FTP service detection","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"No FTP service enabled"},"TC-ATK-03":{"id":"TC-ATK-03","name":"Debug tool presence","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-6"},"pass_condition":"No debug tools in filesystem"},"TC-ATK-04":{"id":"TC-ATK-04","name":"UART debug shell detection","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-4"},"pass_condition":"No UART shell spawned at boot"},"TC-ATK-05":{"id":"TC-ATK-05","name":"Unnecessary network services","phase":2,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(g)","un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"All enabled services functionally justified"},"TC-ATK-06":{"id":"TC-ATK-06","name":"Web interface privilege check","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-7"},"pass_condition":"Web server runs as non-root user"},"TC-ATK-07":{"id":"TC-ATK-07","name":"Vulnerability disclosure policy presence","phase":3,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"fda_524b":"(b)(2)","iso_21434":"8.3","tec_31318":"3.2","en_18031_1":"GEC-2","iec_81001_5_1":"6.2","etsi_en_303_645":"5.2-1"},"pass_condition":"RFC 9116 security.txt found in the firmware filesystem"},"TC-ATK-08":{"id":"TC-ATK-08","name":"Brute-force protection on network authentication","phase":1,"category":"Attack_Surface","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","fda_524b":"(b)(2)","iec_62443":"CR 1.11","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-5"},"pass_condition":"A rate limit, lockout or retry counter protects every network authentication surface the firmware exposes"},"TC-ATK-09":{"id":"TC-ATK-09","name":"Pre-authentication information disclosure","phase":1,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(k)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.1, 3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-2"},"pass_condition":"No banner presented before authentication names the product and its firmware version"},"TC-ATK-10":{"id":"TC-ATK-10","name":"Redundant root-privileged account","phase":1,"category":"Attack_Surface","severity":"CRITICAL","frameworks":{"fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-7"},"pass_condition":"root is the only account with UID 0; every other account has its own non-zero UID"},"TC-ATK-11":{"id":"TC-ATK-11","name":"Security event logging present","phase":1,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(m)","fda_524b":"(b)(2)","iec_62443":"CR 6.1","iso_21434":"10.4.2","tec_31318":"3.10","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_800_193":"4.1.4"},"pass_condition":"The firmware ships a logging facility and starts it, so authentication, configuration and update events are recorded"},"TC-ATK-12":{"id":"TC-ATK-12","name":"Management interface served over cleartext HTTP","phase":1,"category":"Attack_Surface","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(2)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5-1"},"pass_condition":"Every web management interface is served over TLS; no HTTP listener without an HTTPS counterpart"},"TC-BIN-01":{"id":"TC-BIN-01","name":"Stack canary detection","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Stack canaries present in critical binaries"},"TC-BIN-02":{"id":"TC-BIN-02","name":"NX/DEP bit verification","phase":3,"category":"Binary_Hardening","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"GNU_STACK segment is non-executable"},"TC-BIN-03":{"id":"TC-BIN-03","name":"PIE/ASLR verification","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Critical binaries compiled as ET_DYN (PIE enabled)"},"TC-BIN-04":{"id":"TC-BIN-04","name":"RELRO configuration","phase":3,"category":"Binary_Hardening","severity":"LOW","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Full RELRO enabled (RELRO + BIND_NOW)"},"TC-BIN-05":{"id":"TC-BIN-05","name":"Debug symbol stripping","phase":3,"category":"Binary_Hardening","severity":"LOW","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"No debug sections in production binaries"},"TC-BIN-06":{"id":"TC-BIN-06","name":"Insecure RPATH/RUNPATH","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"No RPATH/RUNPATH with relative or world-writable paths"},"TC-CVE-01":{"id":"TC-CVE-01","name":"OS and kernel CVE scan","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CVEs with CVSS >= 7.0 for detected OS/kernel version"},"TC-CVE-02":{"id":"TC-CVE-02","name":"BusyBox CVE scan","phase":3,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","etsi_en_303_645":"5.3"},"pass_condition":"BusyBox has no CVEs with CVSS >= 7.0"},"TC-CVE-03":{"id":"TC-CVE-03","name":"TLS library CVE check","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","etsi_en_303_645":"5.3"},"pass_condition":"TLS library has no CVEs with CVSS >= 7.0"},"TC-CVE-04":{"id":"TC-CVE-04","name":"SBOM generation","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","fda_524b":"(b)(3)","iso_21434":"8.5, 8.6","tec_31318":"3.3","iec_81001_5_1":"5.2.4","nist_ir_8259a":"Capability 6","etsi_en_303_645":"5.3"},"pass_condition":"SBOM generated covering >80% of identified binary components"},"TC-CVE-05":{"id":"TC-CVE-05","name":"Known vulnerable binary hash match","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.6 (22)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1"},"pass_condition":"No hash matches against known malicious binary database"},"TC-CVE-06":{"id":"TC-CVE-06","name":"Firmware-wide critical CVE presence","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CRITICAL-severity CVE findings anywhere in the firmware image"},"TC-CVE-07":{"id":"TC-CVE-07","name":"CVE regression from prior firmware version","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1"},"pass_condition":"No new CVE introduced relative to the prior analyzed version of this firmware"},"TC-CVE-08":{"id":"TC-CVE-08","name":"Any component has a HIGH-or-above or known-exploited CVE","phase":1,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CVE with CVSS >= 7.0, and no CISA-KEV-listed CVE, in any component"},"TC-CVE-09":{"id":"TC-CVE-09","name":"End-of-life component in the SBOM","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No SBOM component is past its upstream end of life (engine/intelligence/eol_components.py's dated support table)"},"TC-RUN-01":{"id":"TC-RUN-01","name":"Memory-safety fault under adversarial input","phase":2,"category":"Runtime_Behaviour","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 7","etsi_en_303_645":"5.13-1"},"pass_condition":"No memory-safety fault (SIGSEGV/SIGBUS/SIGILL, or a libc hardening abort) was reproduced while emulating this firmware's binaries with adversarial argv, environment or stdin"},"TC-RUN-02":{"id":"TC-RUN-02","name":"Sandbox network service and process execution observed","phase":2,"category":"Runtime_Behaviour","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 7","etsi_en_303_645":"5.13-1"},"pass_condition":"No binary was observed both serving a listening socket and executing an external program or shell interpreter in the same emulated run"},"TC-UPD-01":{"id":"TC-UPD-01","name":"Update signature verification presence","phase":1,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.2","iec_81001_5_1":"7.2","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3-9, 5.3-10"},"pass_condition":"Signature verification present (RSA-2048+, ECDSA P-256+, Ed25519)"},"TC-UPD-02":{"id":"TC-UPD-02","name":"Update channel encryption","phase":2,"category":"Firmware_Update","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","iec_81001_5_1":"7.2","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3-2, 5.3-7"},"pass_condition":"All update URLs use HTTPS; TLS library present in update handler"},"TC-UPD-03":{"id":"TC-UPD-03","name":"Rollback protection","phase":3,"category":"Firmware_Update","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.3","iec_81001_5_1":"7.2"},"pass_condition":"Version comparison logic present that rejects older versions"},"TC-UPD-04":{"id":"TC-UPD-04","name":"Pre-installation integrity check","phase":2,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.2","iec_81001_5_1":"7.2","etsi_en_303_645":"5.3-9"},"pass_condition":"Hash verification call present before any flash write"},"TC-UPD-05":{"id":"TC-UPD-05","name":"Unsigned update rejection","phase":1,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.1","iec_81001_5_1":"7.2"},"pass_condition":"All code paths after signature failure lead to abort"},"TC-BOOT-01":{"id":"TC-BOOT-01","name":"Bootloader signature verification","phase":1,"category":"Secure_Boot","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(j)","un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.1.1","etsi_en_303_645":"5.7-1"},"pass_condition":"Signature verification present in bootloader"},"TC-BOOT-02":{"id":"TC-BOOT-02","name":"Boot measurement capability","phase":3,"category":"Secure_Boot","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.2.3"},"pass_condition":"TPM driver or IMA configuration present"},"TC-BOOT-03":{"id":"TC-BOOT-03","name":"Recovery partition presence","phase":3,"category":"Secure_Boot","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 3","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.9","en_18031_1":"RLM-1","nist_800_193":"4.3.1"},"pass_condition":"Recovery partition or dual-bank mechanism identified"},"TC-BOOT-04":{"id":"TC-BOOT-04","name":"Runtime integrity verification","phase":3,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(j)","un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.2.1","etsi_en_303_645":"5.7-1"},"pass_condition":"Integrity hash computed and verified at boot"},"TC-BOOT-05":{"id":"TC-BOOT-05","name":"No published test keys in Secure Boot databases","phase":1,"category":"Secure_Boot","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(j)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","en_18031_1":"RLM-1","nist_800_193":"4.1.1","etsi_en_303_645":"5.7-1"},"pass_condition":"No PK, KEK or db certificate is a published test key (PKfail)"},"TC-BOOT-06":{"id":"TC-BOOT-06","name":"Secure Boot revocation list (dbx) current","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(j)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","en_18031_1":"RLM-1","nist_800_193":"4.1.1"},"pass_condition":"dbx carries the published revocations"},"TC-BOOT-07":{"id":"TC-BOOT-07","name":"No firmware module with a published vulnerability","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(a)","fda_524b":"(b)(1)","iso_21434":"10.4.1","en_18031_1":"RLM-1"},"pass_condition":"No module matches a vulnerable advisory entry"},"TC-BOOT-08":{"id":"TC-BOOT-08","name":"No SMM callouts","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(a)","fda_524b":"(b)(1)","iso_21434":"10.4.1","en_18031_1":"RLM-1"},"pass_condition":"SMI handlers call no Boot or Runtime Services"},"TC-CODE-01":{"id":"TC-CODE-01","name":"Command or code injection in shipped scripts","phase":1,"category":"Code_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script passes externally-influenced data into a shell, an exec call or a code-evaluation construct (CWE-78, CWE-88, CWE-94, CWE-95)"},"TC-CODE-02":{"id":"TC-CODE-02","name":"Untrusted input rendered by the device web interface","phase":1,"category":"Code_Security","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No page served by the device writes externally-influenced data into the DOM without escaping it (CWE-79)"},"TC-CODE-03":{"id":"TC-CODE-03","name":"Untrusted input selects a file path","phase":1,"category":"Code_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script uses externally-influenced data to choose a file to read, write or include (CWE-22, CWE-98)"},"TC-CODE-04":{"id":"TC-CODE-04","name":"Untrusted data parsed by an interpreter or database","phase":1,"category":"Code_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script deserializes externally-influenced data or builds a database query from it (CWE-502, CWE-89)"},"TC-CRED-01":{"id":"TC-CRED-01","name":"Hardcoded credential detection","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-1"},"pass_condition":"No hardcoded credential pairs found"},"TC-CRED-02":{"id":"TC-CRED-02","name":"Default credential database match","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(a)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.1","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 2","etsi_en_303_645":"5.1-1, 5.1-2"},"pass_condition":"No matches against default credential database"},"TC-CRED-03":{"id":"TC-CRED-03","name":"Password hash strength assessment","phase":3,"category":"Credential_Security","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-1"},"pass_condition":"All hashes use SHA-512 ($6$) or yescrypt ($y$) minimum"},"TC-CRED-04":{"id":"TC-CRED-04","name":"API key and token detection","phase":3,"category":"Credential_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2"},"pass_condition":"No API keys or tokens detected"},"TC-CRED-05":{"id":"TC-CRED-05","name":"Embedded private key detection","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.6 (19.3)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-3"},"pass_condition":"No private keys found"},"TC-CRED-06":{"id":"TC-CRED-06","name":"Credentials stored in clear text on the device","phase":1,"category":"Credential_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(c)","un_r155":"Annex 5 Part A 4.3.6 (19)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-1"},"pass_condition":"No configuration file on the device holds a password, key or token as a literal value rather than a hash, reference or encrypted blob"},"TC-CRED-07":{"id":"TC-CRED-07","name":"Account with no password set","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-1"},"pass_condition":"No account in the device's credential databases has an empty password field"},"TC-CRYPTO-01":{"id":"TC-CRYPTO-01","name":"MD5 usage in security context","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"MD5 absent from security-critical code paths"},"TC-CRYPTO-02":{"id":"TC-CRYPTO-02","name":"SHA-1 usage in security context","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"SHA-1 absent from security-critical code paths"},"TC-CRYPTO-03":{"id":"TC-CRYPTO-03","name":"Deprecated cipher detection (DES/3DES/RC4)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No use of DES, 3DES, or RC4 detected"},"TC-CRYPTO-04":{"id":"TC-CRYPTO-04","name":"RSA key length validation","phase":3,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2"},"pass_condition":"All RSA keys are 2048 bits or larger"},"TC-CRYPTO-05":{"id":"TC-CRYPTO-05","name":"TLS version enforcement","phase":3,"category":"Cryptography","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"Only TLS 1.2 and 1.3 enabled"},"TC-CRYPTO-06":{"id":"TC-CRYPTO-06","name":"Certificate validation","phase":3,"category":"Cryptography","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"No self-signed certs in production; no expired certs"},"TC-CRYPTO-07":{"id":"TC-CRYPTO-07","name":"Hardcoded IV/salt detection","phase":3,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2"},"pass_condition":"IVs and salts are generated dynamically"},"TC-CRYPTO-08":{"id":"TC-CRYPTO-08","name":"Deprecated SSL protocol versions (SSLv2/SSLv3)","phase":2,"category":"Cryptography","severity":"CRITICAL","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"No SSLv2 or SSLv3 protocol support detected"},"TC-CRYPTO-09":{"id":"TC-CRYPTO-09","name":"Broken hash algorithm (MD4)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"MD4 absent from security-critical code paths"},"TC-CRYPTO-10":{"id":"TC-CRYPTO-10","name":"Weak or null cipher (RC2, null cipher suite)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No RC2 or null cipher suite detected"},"TC-CRYPTO-11":{"id":"TC-CRYPTO-11","name":"ECB block-cipher mode","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No ECB mode encryption detected"}},"profile_snapshot":null,"severity_weights":{"LOW":1,"HIGH":15,"MEDIUM":5,"CRITICAL":40},"framework_version":"1.0","environment_artifact":null,"input_stage_versions":{"runtime":null,"source_scan":{"status":"complete","findings":56,"truncated":null,"files_found":116,"completed_at":"2026-10-10T06:46:54.176998+00:00","assessment_id":"23d691cb-de7e-4d36-a5a0-4a5a94978278","files_scanned":116,"engine_artifact":null,"provenance_note":"Configured sandbox artifact digest; unknown if not supplied.","orchestrator_build":"unknown"},"firmware_sha256":"00bd253bfce5ea2d87c430dbbddc21528757b059d5b67b57b8f31397ddc7abbb"},"scoring_engine_build":"unknown","scored_on_partial_read":false,"automated_check_results":{"TC-ATK-01":"PASS","TC-ATK-02":"PASS","TC-ATK-03":"FAIL","TC-ATK-04":"FAIL","TC-ATK-06":"PASS","TC-ATK-08":"PASS","TC-ATK-09":"FAIL","TC-ATK-10":"PASS","TC-ATK-11":"PASS","TC-ATK-12":"FAIL","TC-BIN-01":"FAIL","TC-BIN-02":"PASS","TC-BIN-03":"FAIL","TC-BIN-04":"PASS","TC-BIN-05":"FAIL","TC-BIN-06":"PASS","TC-CVE-01":"PASS","TC-CVE-02":"FAIL","TC-CVE-03":"PASS","TC-CVE-05":"PASS","TC-CVE-06":"FAIL","TC-CVE-07":"PASS","TC-CVE-08":"FAIL","TC-CVE-09":"PASS","TC-RUN-01":"NOT_ASSESSED","TC-RUN-02":"NOT_ASSESSED","TC-CODE-01":"FAIL","TC-CODE-02":"PASS","TC-CODE-03":"PASS","TC-CODE-04":"FAIL","TC-CRED-01":"PASS","TC-CRED-03":"PASS","TC-CRED-04":"PASS","TC-CRED-05":"PASS","TC-CRED-06":"PASS","TC-CRED-07":"FAIL","TC-CRYPTO-01":"FAIL","TC-CRYPTO-02":"PASS","TC-CRYPTO-03":"FAIL","TC-CRYPTO-04":"PASS","TC-CRYPTO-05":"PASS","TC-CRYPTO-06":"FAIL","TC-CRYPTO-07":"NOT_ASSESSED","TC-CRYPTO-08":"PASS","TC-CRYPTO-09":"FAIL","TC-CRYPTO-10":"PASS","TC-CRYPTO-11":"PASS"}}},{"id":802,"framework":"ETSI EN 303 645","evaluated_at":"2026-10-10T06:53:48.329847Z","score":0.6167664670658682,"assessment_context":{"score":0.6167664670658682,"counts":{"FAIL":16,"PASS":23,"WAIVED":0,"PARTIAL":0,"NOT_ASSESSED":5,"MANUAL_REVIEW":0,"NOT_APPLICABLE":1,"EVIDENCE_SUBMITTED":0},"coverage":{"checks_total":64,"checks_graded":39,"checks_assessed":45,"categories_total":9,"categories_assessed":8},"timezone":"UTC","numerator":515,"denominator":835,"firmware_id":97,"evaluated_at":"2026-10-10T06:53:48.329847+00:00","assessment_id":"135a0909-2156-44f3-94ff-fe95417ff10e:etsi_en_303_645","check_results":{"TC-ATK-01":"PASS","TC-ATK-02":"PASS","TC-ATK-03":"FAIL","TC-ATK-04":"FAIL","TC-ATK-05":"PASS","TC-ATK-06":"PASS","TC-ATK-07":"NOT_ASSESSED","TC-ATK-08":"PASS","TC-ATK-09":"FAIL","TC-ATK-10":"PASS","TC-ATK-12":"FAIL","TC-CVE-01":"PASS","TC-CVE-02":"FAIL","TC-CVE-03":"PASS","TC-CVE-04":"PASS","TC-CVE-06":"FAIL","TC-CVE-08":"FAIL","TC-CVE-09":"PASS","TC-RUN-01":"NOT_ASSESSED","TC-RUN-02":"NOT_ASSESSED","TC-UPD-01":"FAIL","TC-UPD-02":"PASS","TC-UPD-04":"NOT_ASSESSED","TC-BOOT-01":"NOT_ASSESSED","TC-BOOT-04":"FAIL","TC-BOOT-05":"NOT_APPLICABLE","TC-CODE-01":"FAIL","TC-CODE-02":"PASS","TC-CODE-03":"PASS","TC-CODE-04":"FAIL","TC-CRED-01":"PASS","TC-CRED-02":"PASS","TC-CRED-03":"PASS","TC-CRED-05":"PASS","TC-CRED-06":"PASS","TC-CRED-07":"FAIL","TC-CRYPTO-01":"FAIL","TC-CRYPTO-02":"PASS","TC-CRYPTO-03":"FAIL","TC-CRYPTO-05":"PASS","TC-CRYPTO-06":"FAIL","TC-CRYPTO-08":"PASS","TC-CRYPTO-09":"FAIL","TC-CRYPTO-10":"PASS","TC-CRYPTO-11":"PASS"},"framework_key":"etsi_en_303_645","mapping_sha256":"956eb0935b02c7c7606fa0cafd2b9467e1ef9388737de645513f89bdb9ef5881","profile_sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","scoring_caveat":null,"scoring_method":"severity-weighted-assessed-controls-v1","provenance_note":"Scoring, profile and available stage snapshot. Static detector/feed artifact identities remain unrecorded unless supplied by their originating stage; current feeds cannot reconstruct them.","manual_decisions":[],"mapping_snapshot":{"TC-ATK-01":{"id":"TC-ATK-01","name":"Telnet service detection","phase":1,"category":"Attack_Surface","severity":"CRITICAL","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"Telnet absent or explicitly disabled"},"TC-ATK-02":{"id":"TC-ATK-02","name":"FTP service detection","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"No FTP service enabled"},"TC-ATK-03":{"id":"TC-ATK-03","name":"Debug tool presence","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-6"},"pass_condition":"No debug tools in filesystem"},"TC-ATK-04":{"id":"TC-ATK-04","name":"UART debug shell detection","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-4"},"pass_condition":"No UART shell spawned at boot"},"TC-ATK-05":{"id":"TC-ATK-05","name":"Unnecessary network services","phase":2,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(g)","un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"All enabled services functionally justified"},"TC-ATK-06":{"id":"TC-ATK-06","name":"Web interface privilege check","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-7"},"pass_condition":"Web server runs as non-root user"},"TC-ATK-07":{"id":"TC-ATK-07","name":"Vulnerability disclosure policy presence","phase":3,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"fda_524b":"(b)(2)","iso_21434":"8.3","tec_31318":"3.2","en_18031_1":"GEC-2","iec_81001_5_1":"6.2","etsi_en_303_645":"5.2-1"},"pass_condition":"RFC 9116 security.txt found in the firmware filesystem"},"TC-ATK-08":{"id":"TC-ATK-08","name":"Brute-force protection on network authentication","phase":1,"category":"Attack_Surface","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","fda_524b":"(b)(2)","iec_62443":"CR 1.11","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-5"},"pass_condition":"A rate limit, lockout or retry counter protects every network authentication surface the firmware exposes"},"TC-ATK-09":{"id":"TC-ATK-09","name":"Pre-authentication information disclosure","phase":1,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(k)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.1, 3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-2"},"pass_condition":"No banner presented before authentication names the product and its firmware version"},"TC-ATK-10":{"id":"TC-ATK-10","name":"Redundant root-privileged account","phase":1,"category":"Attack_Surface","severity":"CRITICAL","frameworks":{"fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-7"},"pass_condition":"root is the only account with UID 0; every other account has its own non-zero UID"},"TC-ATK-11":{"id":"TC-ATK-11","name":"Security event logging present","phase":1,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(m)","fda_524b":"(b)(2)","iec_62443":"CR 6.1","iso_21434":"10.4.2","tec_31318":"3.10","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_800_193":"4.1.4"},"pass_condition":"The firmware ships a logging facility and starts it, so authentication, configuration and update events are recorded"},"TC-ATK-12":{"id":"TC-ATK-12","name":"Management interface served over cleartext HTTP","phase":1,"category":"Attack_Surface","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(2)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5-1"},"pass_condition":"Every web management interface is served over TLS; no HTTP listener without an HTTPS counterpart"},"TC-BIN-01":{"id":"TC-BIN-01","name":"Stack canary detection","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Stack canaries present in critical binaries"},"TC-BIN-02":{"id":"TC-BIN-02","name":"NX/DEP bit verification","phase":3,"category":"Binary_Hardening","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"GNU_STACK segment is non-executable"},"TC-BIN-03":{"id":"TC-BIN-03","name":"PIE/ASLR verification","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Critical binaries compiled as ET_DYN (PIE enabled)"},"TC-BIN-04":{"id":"TC-BIN-04","name":"RELRO configuration","phase":3,"category":"Binary_Hardening","severity":"LOW","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Full RELRO enabled (RELRO + BIND_NOW)"},"TC-BIN-05":{"id":"TC-BIN-05","name":"Debug symbol stripping","phase":3,"category":"Binary_Hardening","severity":"LOW","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"No debug sections in production binaries"},"TC-BIN-06":{"id":"TC-BIN-06","name":"Insecure RPATH/RUNPATH","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"No RPATH/RUNPATH with relative or world-writable paths"},"TC-CVE-01":{"id":"TC-CVE-01","name":"OS and kernel CVE scan","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CVEs with CVSS >= 7.0 for detected OS/kernel version"},"TC-CVE-02":{"id":"TC-CVE-02","name":"BusyBox CVE scan","phase":3,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","etsi_en_303_645":"5.3"},"pass_condition":"BusyBox has no CVEs with CVSS >= 7.0"},"TC-CVE-03":{"id":"TC-CVE-03","name":"TLS library CVE check","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","etsi_en_303_645":"5.3"},"pass_condition":"TLS library has no CVEs with CVSS >= 7.0"},"TC-CVE-04":{"id":"TC-CVE-04","name":"SBOM generation","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","fda_524b":"(b)(3)","iso_21434":"8.5, 8.6","tec_31318":"3.3","iec_81001_5_1":"5.2.4","nist_ir_8259a":"Capability 6","etsi_en_303_645":"5.3"},"pass_condition":"SBOM generated covering >80% of identified binary components"},"TC-CVE-05":{"id":"TC-CVE-05","name":"Known vulnerable binary hash match","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.6 (22)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1"},"pass_condition":"No hash matches against known malicious binary database"},"TC-CVE-06":{"id":"TC-CVE-06","name":"Firmware-wide critical CVE presence","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CRITICAL-severity CVE findings anywhere in the firmware image"},"TC-CVE-07":{"id":"TC-CVE-07","name":"CVE regression from prior firmware version","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1"},"pass_condition":"No new CVE introduced relative to the prior analyzed version of this firmware"},"TC-CVE-08":{"id":"TC-CVE-08","name":"Any component has a HIGH-or-above or known-exploited CVE","phase":1,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CVE with CVSS >= 7.0, and no CISA-KEV-listed CVE, in any component"},"TC-CVE-09":{"id":"TC-CVE-09","name":"End-of-life component in the SBOM","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No SBOM component is past its upstream end of life (engine/intelligence/eol_components.py's dated support table)"},"TC-RUN-01":{"id":"TC-RUN-01","name":"Memory-safety fault under adversarial input","phase":2,"category":"Runtime_Behaviour","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 7","etsi_en_303_645":"5.13-1"},"pass_condition":"No memory-safety fault (SIGSEGV/SIGBUS/SIGILL, or a libc hardening abort) was reproduced while emulating this firmware's binaries with adversarial argv, environment or stdin"},"TC-RUN-02":{"id":"TC-RUN-02","name":"Sandbox network service and process execution observed","phase":2,"category":"Runtime_Behaviour","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 7","etsi_en_303_645":"5.13-1"},"pass_condition":"No binary was observed both serving a listening socket and executing an external program or shell interpreter in the same emulated run"},"TC-UPD-01":{"id":"TC-UPD-01","name":"Update signature verification presence","phase":1,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.2","iec_81001_5_1":"7.2","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3-9, 5.3-10"},"pass_condition":"Signature verification present (RSA-2048+, ECDSA P-256+, Ed25519)"},"TC-UPD-02":{"id":"TC-UPD-02","name":"Update channel encryption","phase":2,"category":"Firmware_Update","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","iec_81001_5_1":"7.2","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3-2, 5.3-7"},"pass_condition":"All update URLs use HTTPS; TLS library present in update handler"},"TC-UPD-03":{"id":"TC-UPD-03","name":"Rollback protection","phase":3,"category":"Firmware_Update","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.3","iec_81001_5_1":"7.2"},"pass_condition":"Version comparison logic present that rejects older versions"},"TC-UPD-04":{"id":"TC-UPD-04","name":"Pre-installation integrity check","phase":2,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.2","iec_81001_5_1":"7.2","etsi_en_303_645":"5.3-9"},"pass_condition":"Hash verification call present before any flash write"},"TC-UPD-05":{"id":"TC-UPD-05","name":"Unsigned update rejection","phase":1,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.1","iec_81001_5_1":"7.2"},"pass_condition":"All code paths after signature failure lead to abort"},"TC-BOOT-01":{"id":"TC-BOOT-01","name":"Bootloader signature verification","phase":1,"category":"Secure_Boot","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(j)","un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.1.1","etsi_en_303_645":"5.7-1"},"pass_condition":"Signature verification present in bootloader"},"TC-BOOT-02":{"id":"TC-BOOT-02","name":"Boot measurement capability","phase":3,"category":"Secure_Boot","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.2.3"},"pass_condition":"TPM driver or IMA configuration present"},"TC-BOOT-03":{"id":"TC-BOOT-03","name":"Recovery partition presence","phase":3,"category":"Secure_Boot","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 3","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.9","en_18031_1":"RLM-1","nist_800_193":"4.3.1"},"pass_condition":"Recovery partition or dual-bank mechanism identified"},"TC-BOOT-04":{"id":"TC-BOOT-04","name":"Runtime integrity verification","phase":3,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(j)","un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.2.1","etsi_en_303_645":"5.7-1"},"pass_condition":"Integrity hash computed and verified at boot"},"TC-BOOT-05":{"id":"TC-BOOT-05","name":"No published test keys in Secure Boot databases","phase":1,"category":"Secure_Boot","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(j)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","en_18031_1":"RLM-1","nist_800_193":"4.1.1","etsi_en_303_645":"5.7-1"},"pass_condition":"No PK, KEK or db certificate is a published test key (PKfail)"},"TC-BOOT-06":{"id":"TC-BOOT-06","name":"Secure Boot revocation list (dbx) current","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(j)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","en_18031_1":"RLM-1","nist_800_193":"4.1.1"},"pass_condition":"dbx carries the published revocations"},"TC-BOOT-07":{"id":"TC-BOOT-07","name":"No firmware module with a published vulnerability","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(a)","fda_524b":"(b)(1)","iso_21434":"10.4.1","en_18031_1":"RLM-1"},"pass_condition":"No module matches a vulnerable advisory entry"},"TC-BOOT-08":{"id":"TC-BOOT-08","name":"No SMM callouts","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(a)","fda_524b":"(b)(1)","iso_21434":"10.4.1","en_18031_1":"RLM-1"},"pass_condition":"SMI handlers call no Boot or Runtime Services"},"TC-CODE-01":{"id":"TC-CODE-01","name":"Command or code injection in shipped scripts","phase":1,"category":"Code_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script passes externally-influenced data into a shell, an exec call or a code-evaluation construct (CWE-78, CWE-88, CWE-94, CWE-95)"},"TC-CODE-02":{"id":"TC-CODE-02","name":"Untrusted input rendered by the device web interface","phase":1,"category":"Code_Security","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No page served by the device writes externally-influenced data into the DOM without escaping it (CWE-79)"},"TC-CODE-03":{"id":"TC-CODE-03","name":"Untrusted input selects a file path","phase":1,"category":"Code_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script uses externally-influenced data to choose a file to read, write or include (CWE-22, CWE-98)"},"TC-CODE-04":{"id":"TC-CODE-04","name":"Untrusted data parsed by an interpreter or database","phase":1,"category":"Code_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script deserializes externally-influenced data or builds a database query from it (CWE-502, CWE-89)"},"TC-CRED-01":{"id":"TC-CRED-01","name":"Hardcoded credential detection","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-1"},"pass_condition":"No hardcoded credential pairs found"},"TC-CRED-02":{"id":"TC-CRED-02","name":"Default credential database match","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(a)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.1","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 2","etsi_en_303_645":"5.1-1, 5.1-2"},"pass_condition":"No matches against default credential database"},"TC-CRED-03":{"id":"TC-CRED-03","name":"Password hash strength assessment","phase":3,"category":"Credential_Security","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-1"},"pass_condition":"All hashes use SHA-512 ($6$) or yescrypt ($y$) minimum"},"TC-CRED-04":{"id":"TC-CRED-04","name":"API key and token detection","phase":3,"category":"Credential_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2"},"pass_condition":"No API keys or tokens detected"},"TC-CRED-05":{"id":"TC-CRED-05","name":"Embedded private key detection","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.6 (19.3)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-3"},"pass_condition":"No private keys found"},"TC-CRED-06":{"id":"TC-CRED-06","name":"Credentials stored in clear text on the device","phase":1,"category":"Credential_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(c)","un_r155":"Annex 5 Part A 4.3.6 (19)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-1"},"pass_condition":"No configuration file on the device holds a password, key or token as a literal value rather than a hash, reference or encrypted blob"},"TC-CRED-07":{"id":"TC-CRED-07","name":"Account with no password set","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-1"},"pass_condition":"No account in the device's credential databases has an empty password field"},"TC-CRYPTO-01":{"id":"TC-CRYPTO-01","name":"MD5 usage in security context","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"MD5 absent from security-critical code paths"},"TC-CRYPTO-02":{"id":"TC-CRYPTO-02","name":"SHA-1 usage in security context","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"SHA-1 absent from security-critical code paths"},"TC-CRYPTO-03":{"id":"TC-CRYPTO-03","name":"Deprecated cipher detection (DES/3DES/RC4)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No use of DES, 3DES, or RC4 detected"},"TC-CRYPTO-04":{"id":"TC-CRYPTO-04","name":"RSA key length validation","phase":3,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2"},"pass_condition":"All RSA keys are 2048 bits or larger"},"TC-CRYPTO-05":{"id":"TC-CRYPTO-05","name":"TLS version enforcement","phase":3,"category":"Cryptography","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"Only TLS 1.2 and 1.3 enabled"},"TC-CRYPTO-06":{"id":"TC-CRYPTO-06","name":"Certificate validation","phase":3,"category":"Cryptography","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"No self-signed certs in production; no expired certs"},"TC-CRYPTO-07":{"id":"TC-CRYPTO-07","name":"Hardcoded IV/salt detection","phase":3,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2"},"pass_condition":"IVs and salts are generated dynamically"},"TC-CRYPTO-08":{"id":"TC-CRYPTO-08","name":"Deprecated SSL protocol versions (SSLv2/SSLv3)","phase":2,"category":"Cryptography","severity":"CRITICAL","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"No SSLv2 or SSLv3 protocol support detected"},"TC-CRYPTO-09":{"id":"TC-CRYPTO-09","name":"Broken hash algorithm (MD4)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"MD4 absent from security-critical code paths"},"TC-CRYPTO-10":{"id":"TC-CRYPTO-10","name":"Weak or null cipher (RC2, null cipher suite)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No RC2 or null cipher suite detected"},"TC-CRYPTO-11":{"id":"TC-CRYPTO-11","name":"ECB block-cipher mode","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No ECB mode encryption detected"}},"profile_snapshot":null,"severity_weights":{"LOW":1,"HIGH":15,"MEDIUM":5,"CRITICAL":40},"framework_version":"v2.1.1","environment_artifact":null,"input_stage_versions":{"runtime":null,"source_scan":{"status":"complete","findings":56,"truncated":null,"files_found":116,"completed_at":"2026-10-10T06:46:54.176998+00:00","assessment_id":"23d691cb-de7e-4d36-a5a0-4a5a94978278","files_scanned":116,"engine_artifact":null,"provenance_note":"Configured sandbox artifact digest; unknown if not supplied.","orchestrator_build":"unknown"},"firmware_sha256":"00bd253bfce5ea2d87c430dbbddc21528757b059d5b67b57b8f31397ddc7abbb"},"scoring_engine_build":"unknown","scored_on_partial_read":false,"automated_check_results":{"TC-ATK-01":"PASS","TC-ATK-02":"PASS","TC-ATK-03":"FAIL","TC-ATK-04":"FAIL","TC-ATK-05":"PASS","TC-ATK-06":"PASS","TC-ATK-07":"NOT_ASSESSED","TC-ATK-08":"PASS","TC-ATK-09":"FAIL","TC-ATK-10":"PASS","TC-ATK-12":"FAIL","TC-CVE-01":"PASS","TC-CVE-02":"FAIL","TC-CVE-03":"PASS","TC-CVE-04":"PASS","TC-CVE-06":"FAIL","TC-CVE-08":"FAIL","TC-CVE-09":"PASS","TC-RUN-01":"NOT_ASSESSED","TC-RUN-02":"NOT_ASSESSED","TC-UPD-01":"FAIL","TC-UPD-02":"PASS","TC-UPD-04":"NOT_ASSESSED","TC-BOOT-01":"NOT_ASSESSED","TC-BOOT-04":"FAIL","TC-BOOT-05":"NOT_APPLICABLE","TC-CODE-01":"FAIL","TC-CODE-02":"PASS","TC-CODE-03":"PASS","TC-CODE-04":"FAIL","TC-CRED-01":"PASS","TC-CRED-02":"PASS","TC-CRED-03":"PASS","TC-CRED-05":"PASS","TC-CRED-06":"PASS","TC-CRED-07":"FAIL","TC-CRYPTO-01":"FAIL","TC-CRYPTO-02":"PASS","TC-CRYPTO-03":"FAIL","TC-CRYPTO-05":"PASS","TC-CRYPTO-06":"FAIL","TC-CRYPTO-08":"PASS","TC-CRYPTO-09":"FAIL","TC-CRYPTO-10":"PASS","TC-CRYPTO-11":"PASS"}}},{"id":801,"framework":"OWASP Firmware Security Testing Methodology","evaluated_at":"2026-10-10T06:47:09.643207Z","score":0.8012422360248448,"assessment_context":{"score":0.8012422360248448,"counts":{"FAIL":10,"PASS":30,"WAIVED":0,"PARTIAL":0,"NOT_ASSESSED":7,"MANUAL_REVIEW":0,"NOT_APPLICABLE":0,"EVIDENCE_SUBMITTED":0},"coverage":{"checks_total":64,"checks_graded":40,"checks_assessed":47,"categories_total":9,"categories_assessed":7},"timezone":"UTC","numerator":645,"denominator":805,"firmware_id":97,"evaluated_at":"2026-10-10T06:47:09.643207+00:00","assessment_id":"4edb1eb0-b52b-4422-987a-c365db83aca8:owasp_fstm","check_results":{"TC-ATK-01":"PASS","TC-ATK-02":"PASS","TC-ATK-03":"FAIL","TC-ATK-04":"FAIL","TC-ATK-06":"PASS","TC-ATK-08":"PASS","TC-ATK-09":"FAIL","TC-ATK-10":"PASS","TC-ATK-11":"PASS","TC-ATK-12":"FAIL","TC-BIN-01":"FAIL","TC-BIN-02":"NOT_ASSESSED","TC-BIN-03":"FAIL","TC-BIN-04":"NOT_ASSESSED","TC-BIN-05":"NOT_ASSESSED","TC-BIN-06":"NOT_ASSESSED","TC-CVE-01":"PASS","TC-CVE-02":"PASS","TC-CVE-03":"PASS","TC-CVE-05":"PASS","TC-CVE-06":"PASS","TC-CVE-07":"PASS","TC-CVE-08":"PASS","TC-CVE-09":"PASS","TC-RUN-01":"NOT_ASSESSED","TC-RUN-02":"NOT_ASSESSED","TC-CODE-01":"FAIL","TC-CODE-02":"PASS","TC-CODE-03":"PASS","TC-CODE-04":"FAIL","TC-CRED-01":"PASS","TC-CRED-03":"PASS","TC-CRED-04":"PASS","TC-CRED-05":"PASS","TC-CRED-06":"PASS","TC-CRED-07":"FAIL","TC-CRYPTO-01":"PASS","TC-CRYPTO-02":"PASS","TC-CRYPTO-03":"PASS","TC-CRYPTO-04":"PASS","TC-CRYPTO-05":"PASS","TC-CRYPTO-06":"FAIL","TC-CRYPTO-07":"NOT_ASSESSED","TC-CRYPTO-08":"PASS","TC-CRYPTO-09":"PASS","TC-CRYPTO-10":"PASS","TC-CRYPTO-11":"PASS"},"framework_key":"owasp_fstm","mapping_sha256":"956eb0935b02c7c7606fa0cafd2b9467e1ef9388737de645513f89bdb9ef5881","profile_sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","scoring_caveat":null,"scoring_method":"severity-weighted-assessed-controls-v1","provenance_note":"Scoring, profile and available stage snapshot. Static detector/feed artifact identities remain unrecorded unless supplied by their originating stage; current feeds cannot reconstruct them.","manual_decisions":[],"mapping_snapshot":{"TC-ATK-01":{"id":"TC-ATK-01","name":"Telnet service detection","phase":1,"category":"Attack_Surface","severity":"CRITICAL","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"Telnet absent or explicitly disabled"},"TC-ATK-02":{"id":"TC-ATK-02","name":"FTP service detection","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"No FTP service enabled"},"TC-ATK-03":{"id":"TC-ATK-03","name":"Debug tool presence","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-6"},"pass_condition":"No debug tools in filesystem"},"TC-ATK-04":{"id":"TC-ATK-04","name":"UART debug shell detection","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-4"},"pass_condition":"No UART shell spawned at boot"},"TC-ATK-05":{"id":"TC-ATK-05","name":"Unnecessary network services","phase":2,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(g)","un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"All enabled services functionally justified"},"TC-ATK-06":{"id":"TC-ATK-06","name":"Web interface privilege check","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-7"},"pass_condition":"Web server runs as non-root user"},"TC-ATK-07":{"id":"TC-ATK-07","name":"Vulnerability disclosure policy presence","phase":3,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"fda_524b":"(b)(2)","iso_21434":"8.3","tec_31318":"3.2","en_18031_1":"GEC-2","iec_81001_5_1":"6.2","etsi_en_303_645":"5.2-1"},"pass_condition":"RFC 9116 security.txt found in the firmware filesystem"},"TC-ATK-08":{"id":"TC-ATK-08","name":"Brute-force protection on network authentication","phase":1,"category":"Attack_Surface","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","fda_524b":"(b)(2)","iec_62443":"CR 1.11","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-5"},"pass_condition":"A rate limit, lockout or retry counter protects every network authentication surface the firmware exposes"},"TC-ATK-09":{"id":"TC-ATK-09","name":"Pre-authentication information disclosure","phase":1,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(k)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.1, 3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-2"},"pass_condition":"No banner presented before authentication names the product and its firmware version"},"TC-ATK-10":{"id":"TC-ATK-10","name":"Redundant root-privileged account","phase":1,"category":"Attack_Surface","severity":"CRITICAL","frameworks":{"fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-7"},"pass_condition":"root is the only account with UID 0; every other account has its own non-zero UID"},"TC-ATK-11":{"id":"TC-ATK-11","name":"Security event logging present","phase":1,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(m)","fda_524b":"(b)(2)","iec_62443":"CR 6.1","iso_21434":"10.4.2","tec_31318":"3.10","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_800_193":"4.1.4"},"pass_condition":"The firmware ships a logging facility and starts it, so authentication, configuration and update events are recorded"},"TC-ATK-12":{"id":"TC-ATK-12","name":"Management interface served over cleartext HTTP","phase":1,"category":"Attack_Surface","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(2)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5-1"},"pass_condition":"Every web management interface is served over TLS; no HTTP listener without an HTTPS counterpart"},"TC-BIN-01":{"id":"TC-BIN-01","name":"Stack canary detection","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Stack canaries present in critical binaries"},"TC-BIN-02":{"id":"TC-BIN-02","name":"NX/DEP bit verification","phase":3,"category":"Binary_Hardening","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"GNU_STACK segment is non-executable"},"TC-BIN-03":{"id":"TC-BIN-03","name":"PIE/ASLR verification","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Critical binaries compiled as ET_DYN (PIE enabled)"},"TC-BIN-04":{"id":"TC-BIN-04","name":"RELRO configuration","phase":3,"category":"Binary_Hardening","severity":"LOW","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Full RELRO enabled (RELRO + BIND_NOW)"},"TC-BIN-05":{"id":"TC-BIN-05","name":"Debug symbol stripping","phase":3,"category":"Binary_Hardening","severity":"LOW","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"No debug sections in production binaries"},"TC-BIN-06":{"id":"TC-BIN-06","name":"Insecure RPATH/RUNPATH","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"No RPATH/RUNPATH with relative or world-writable paths"},"TC-CVE-01":{"id":"TC-CVE-01","name":"OS and kernel CVE scan","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CVEs with CVSS >= 7.0 for detected OS/kernel version"},"TC-CVE-02":{"id":"TC-CVE-02","name":"BusyBox CVE scan","phase":3,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","etsi_en_303_645":"5.3"},"pass_condition":"BusyBox has no CVEs with CVSS >= 7.0"},"TC-CVE-03":{"id":"TC-CVE-03","name":"TLS library CVE check","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","etsi_en_303_645":"5.3"},"pass_condition":"TLS library has no CVEs with CVSS >= 7.0"},"TC-CVE-04":{"id":"TC-CVE-04","name":"SBOM generation","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","fda_524b":"(b)(3)","iso_21434":"8.5, 8.6","tec_31318":"3.3","iec_81001_5_1":"5.2.4","nist_ir_8259a":"Capability 6","etsi_en_303_645":"5.3"},"pass_condition":"SBOM generated covering >80% of identified binary components"},"TC-CVE-05":{"id":"TC-CVE-05","name":"Known vulnerable binary hash match","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.6 (22)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1"},"pass_condition":"No hash matches against known malicious binary database"},"TC-CVE-06":{"id":"TC-CVE-06","name":"Firmware-wide critical CVE presence","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CRITICAL-severity CVE findings anywhere in the firmware image"},"TC-CVE-07":{"id":"TC-CVE-07","name":"CVE regression from prior firmware version","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1"},"pass_condition":"No new CVE introduced relative to the prior analyzed version of this firmware"},"TC-CVE-08":{"id":"TC-CVE-08","name":"Any component has a HIGH-or-above or known-exploited CVE","phase":1,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CVE with CVSS >= 7.0, and no CISA-KEV-listed CVE, in any component"},"TC-CVE-09":{"id":"TC-CVE-09","name":"End-of-life component in the SBOM","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No SBOM component is past its upstream end of life (engine/intelligence/eol_components.py's dated support table)"},"TC-RUN-01":{"id":"TC-RUN-01","name":"Memory-safety fault under adversarial input","phase":2,"category":"Runtime_Behaviour","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 7","etsi_en_303_645":"5.13-1"},"pass_condition":"No memory-safety fault (SIGSEGV/SIGBUS/SIGILL, or a libc hardening abort) was reproduced while emulating this firmware's binaries with adversarial argv, environment or stdin"},"TC-RUN-02":{"id":"TC-RUN-02","name":"Sandbox network service and process execution observed","phase":2,"category":"Runtime_Behaviour","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 7","etsi_en_303_645":"5.13-1"},"pass_condition":"No binary was observed both serving a listening socket and executing an external program or shell interpreter in the same emulated run"},"TC-UPD-01":{"id":"TC-UPD-01","name":"Update signature verification presence","phase":1,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.2","iec_81001_5_1":"7.2","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3-9, 5.3-10"},"pass_condition":"Signature verification present (RSA-2048+, ECDSA P-256+, Ed25519)"},"TC-UPD-02":{"id":"TC-UPD-02","name":"Update channel encryption","phase":2,"category":"Firmware_Update","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","iec_81001_5_1":"7.2","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3-2, 5.3-7"},"pass_condition":"All update URLs use HTTPS; TLS library present in update handler"},"TC-UPD-03":{"id":"TC-UPD-03","name":"Rollback protection","phase":3,"category":"Firmware_Update","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.3","iec_81001_5_1":"7.2"},"pass_condition":"Version comparison logic present that rejects older versions"},"TC-UPD-04":{"id":"TC-UPD-04","name":"Pre-installation integrity check","phase":2,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.2","iec_81001_5_1":"7.2","etsi_en_303_645":"5.3-9"},"pass_condition":"Hash verification call present before any flash write"},"TC-UPD-05":{"id":"TC-UPD-05","name":"Unsigned update rejection","phase":1,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.1","iec_81001_5_1":"7.2"},"pass_condition":"All code paths after signature failure lead to abort"},"TC-BOOT-01":{"id":"TC-BOOT-01","name":"Bootloader signature verification","phase":1,"category":"Secure_Boot","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(j)","un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.1.1","etsi_en_303_645":"5.7-1"},"pass_condition":"Signature verification present in bootloader"},"TC-BOOT-02":{"id":"TC-BOOT-02","name":"Boot measurement capability","phase":3,"category":"Secure_Boot","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.2.3"},"pass_condition":"TPM driver or IMA configuration present"},"TC-BOOT-03":{"id":"TC-BOOT-03","name":"Recovery partition presence","phase":3,"category":"Secure_Boot","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 3","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.9","en_18031_1":"RLM-1","nist_800_193":"4.3.1"},"pass_condition":"Recovery partition or dual-bank mechanism identified"},"TC-BOOT-04":{"id":"TC-BOOT-04","name":"Runtime integrity verification","phase":3,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(j)","un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.2.1","etsi_en_303_645":"5.7-1"},"pass_condition":"Integrity hash computed and verified at boot"},"TC-BOOT-05":{"id":"TC-BOOT-05","name":"No published test keys in Secure Boot databases","phase":1,"category":"Secure_Boot","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(j)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","en_18031_1":"RLM-1","nist_800_193":"4.1.1","etsi_en_303_645":"5.7-1"},"pass_condition":"No PK, KEK or db certificate is a published test key (PKfail)"},"TC-BOOT-06":{"id":"TC-BOOT-06","name":"Secure Boot revocation list (dbx) current","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(j)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","en_18031_1":"RLM-1","nist_800_193":"4.1.1"},"pass_condition":"dbx carries the published revocations"},"TC-BOOT-07":{"id":"TC-BOOT-07","name":"No firmware module with a published vulnerability","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(a)","fda_524b":"(b)(1)","iso_21434":"10.4.1","en_18031_1":"RLM-1"},"pass_condition":"No module matches a vulnerable advisory entry"},"TC-BOOT-08":{"id":"TC-BOOT-08","name":"No SMM callouts","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(a)","fda_524b":"(b)(1)","iso_21434":"10.4.1","en_18031_1":"RLM-1"},"pass_condition":"SMI handlers call no Boot or Runtime Services"},"TC-CODE-01":{"id":"TC-CODE-01","name":"Command or code injection in shipped scripts","phase":1,"category":"Code_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script passes externally-influenced data into a shell, an exec call or a code-evaluation construct (CWE-78, CWE-88, CWE-94, CWE-95)"},"TC-CODE-02":{"id":"TC-CODE-02","name":"Untrusted input rendered by the device web interface","phase":1,"category":"Code_Security","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No page served by the device writes externally-influenced data into the DOM without escaping it (CWE-79)"},"TC-CODE-03":{"id":"TC-CODE-03","name":"Untrusted input selects a file path","phase":1,"category":"Code_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script uses externally-influenced data to choose a file to read, write or include (CWE-22, CWE-98)"},"TC-CODE-04":{"id":"TC-CODE-04","name":"Untrusted data parsed by an interpreter or database","phase":1,"category":"Code_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script deserializes externally-influenced data or builds a database query from it (CWE-502, CWE-89)"},"TC-CRED-01":{"id":"TC-CRED-01","name":"Hardcoded credential detection","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-1"},"pass_condition":"No hardcoded credential pairs found"},"TC-CRED-02":{"id":"TC-CRED-02","name":"Default credential database match","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(a)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.1","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 2","etsi_en_303_645":"5.1-1, 5.1-2"},"pass_condition":"No matches against default credential database"},"TC-CRED-03":{"id":"TC-CRED-03","name":"Password hash strength assessment","phase":3,"category":"Credential_Security","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-1"},"pass_condition":"All hashes use SHA-512 ($6$) or yescrypt ($y$) minimum"},"TC-CRED-04":{"id":"TC-CRED-04","name":"API key and token detection","phase":3,"category":"Credential_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2"},"pass_condition":"No API keys or tokens detected"},"TC-CRED-05":{"id":"TC-CRED-05","name":"Embedded private key detection","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.6 (19.3)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-3"},"pass_condition":"No private keys found"},"TC-CRED-06":{"id":"TC-CRED-06","name":"Credentials stored in clear text on the device","phase":1,"category":"Credential_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(c)","un_r155":"Annex 5 Part A 4.3.6 (19)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-1"},"pass_condition":"No configuration file on the device holds a password, key or token as a literal value rather than a hash, reference or encrypted blob"},"TC-CRED-07":{"id":"TC-CRED-07","name":"Account with no password set","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-1"},"pass_condition":"No account in the device's credential databases has an empty password field"},"TC-CRYPTO-01":{"id":"TC-CRYPTO-01","name":"MD5 usage in security context","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"MD5 absent from security-critical code paths"},"TC-CRYPTO-02":{"id":"TC-CRYPTO-02","name":"SHA-1 usage in security context","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"SHA-1 absent from security-critical code paths"},"TC-CRYPTO-03":{"id":"TC-CRYPTO-03","name":"Deprecated cipher detection (DES/3DES/RC4)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No use of DES, 3DES, or RC4 detected"},"TC-CRYPTO-04":{"id":"TC-CRYPTO-04","name":"RSA key length validation","phase":3,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2"},"pass_condition":"All RSA keys are 2048 bits or larger"},"TC-CRYPTO-05":{"id":"TC-CRYPTO-05","name":"TLS version enforcement","phase":3,"category":"Cryptography","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"Only TLS 1.2 and 1.3 enabled"},"TC-CRYPTO-06":{"id":"TC-CRYPTO-06","name":"Certificate validation","phase":3,"category":"Cryptography","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"No self-signed certs in production; no expired certs"},"TC-CRYPTO-07":{"id":"TC-CRYPTO-07","name":"Hardcoded IV/salt detection","phase":3,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2"},"pass_condition":"IVs and salts are generated dynamically"},"TC-CRYPTO-08":{"id":"TC-CRYPTO-08","name":"Deprecated SSL protocol versions (SSLv2/SSLv3)","phase":2,"category":"Cryptography","severity":"CRITICAL","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"No SSLv2 or SSLv3 protocol support detected"},"TC-CRYPTO-09":{"id":"TC-CRYPTO-09","name":"Broken hash algorithm (MD4)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"MD4 absent from security-critical code paths"},"TC-CRYPTO-10":{"id":"TC-CRYPTO-10","name":"Weak or null cipher (RC2, null cipher suite)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No RC2 or null cipher suite detected"},"TC-CRYPTO-11":{"id":"TC-CRYPTO-11","name":"ECB block-cipher mode","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No ECB mode encryption detected"}},"profile_snapshot":null,"severity_weights":{"LOW":1,"HIGH":15,"MEDIUM":5,"CRITICAL":40},"framework_version":"1.0","environment_artifact":null,"input_stage_versions":{"runtime":null,"source_scan":{"status":"complete","findings":56,"truncated":null,"files_found":116,"completed_at":"2026-10-10T06:46:54.176998+00:00","assessment_id":"23d691cb-de7e-4d36-a5a0-4a5a94978278","files_scanned":116,"engine_artifact":null,"provenance_note":"Configured sandbox artifact digest; unknown if not supplied.","orchestrator_build":"unknown"},"firmware_sha256":"00bd253bfce5ea2d87c430dbbddc21528757b059d5b67b57b8f31397ddc7abbb"},"scoring_engine_build":"unknown","scored_on_partial_read":false,"automated_check_results":{"TC-ATK-01":"PASS","TC-ATK-02":"PASS","TC-ATK-03":"FAIL","TC-ATK-04":"FAIL","TC-ATK-06":"PASS","TC-ATK-08":"PASS","TC-ATK-09":"FAIL","TC-ATK-10":"PASS","TC-ATK-11":"PASS","TC-ATK-12":"FAIL","TC-BIN-01":"FAIL","TC-BIN-02":"NOT_ASSESSED","TC-BIN-03":"FAIL","TC-BIN-04":"NOT_ASSESSED","TC-BIN-05":"NOT_ASSESSED","TC-BIN-06":"NOT_ASSESSED","TC-CVE-01":"PASS","TC-CVE-02":"PASS","TC-CVE-03":"PASS","TC-CVE-05":"PASS","TC-CVE-06":"PASS","TC-CVE-07":"PASS","TC-CVE-08":"PASS","TC-CVE-09":"PASS","TC-RUN-01":"NOT_ASSESSED","TC-RUN-02":"NOT_ASSESSED","TC-CODE-01":"FAIL","TC-CODE-02":"PASS","TC-CODE-03":"PASS","TC-CODE-04":"FAIL","TC-CRED-01":"PASS","TC-CRED-03":"PASS","TC-CRED-04":"PASS","TC-CRED-05":"PASS","TC-CRED-06":"PASS","TC-CRED-07":"FAIL","TC-CRYPTO-01":"PASS","TC-CRYPTO-02":"PASS","TC-CRYPTO-03":"PASS","TC-CRYPTO-04":"PASS","TC-CRYPTO-05":"PASS","TC-CRYPTO-06":"FAIL","TC-CRYPTO-07":"NOT_ASSESSED","TC-CRYPTO-08":"PASS","TC-CRYPTO-09":"PASS","TC-CRYPTO-10":"PASS","TC-CRYPTO-11":"PASS"}}},{"id":800,"framework":"ETSI EN 303 645","evaluated_at":"2026-10-10T06:47:09.643207Z","score":0.7544910179640718,"assessment_context":{"score":0.7544910179640718,"counts":{"FAIL":10,"PASS":29,"WAIVED":0,"PARTIAL":0,"NOT_ASSESSED":5,"MANUAL_REVIEW":0,"NOT_APPLICABLE":1,"EVIDENCE_SUBMITTED":0},"coverage":{"checks_total":64,"checks_graded":39,"checks_assessed":45,"categories_total":9,"categories_assessed":8},"timezone":"UTC","numerator":630,"denominator":835,"firmware_id":97,"evaluated_at":"2026-10-10T06:47:09.643207+00:00","assessment_id":"4edb1eb0-b52b-4422-987a-c365db83aca8:etsi_en_303_645","check_results":{"TC-ATK-01":"PASS","TC-ATK-02":"PASS","TC-ATK-03":"FAIL","TC-ATK-04":"FAIL","TC-ATK-05":"PASS","TC-ATK-06":"PASS","TC-ATK-07":"NOT_ASSESSED","TC-ATK-08":"PASS","TC-ATK-09":"FAIL","TC-ATK-10":"PASS","TC-ATK-12":"FAIL","TC-CVE-01":"PASS","TC-CVE-02":"PASS","TC-CVE-03":"PASS","TC-CVE-04":"PASS","TC-CVE-06":"PASS","TC-CVE-08":"PASS","TC-CVE-09":"PASS","TC-RUN-01":"NOT_ASSESSED","TC-RUN-02":"NOT_ASSESSED","TC-UPD-01":"FAIL","TC-UPD-02":"PASS","TC-UPD-04":"NOT_ASSESSED","TC-BOOT-01":"NOT_ASSESSED","TC-BOOT-04":"FAIL","TC-BOOT-05":"NOT_APPLICABLE","TC-CODE-01":"FAIL","TC-CODE-02":"PASS","TC-CODE-03":"PASS","TC-CODE-04":"FAIL","TC-CRED-01":"PASS","TC-CRED-02":"PASS","TC-CRED-03":"PASS","TC-CRED-05":"PASS","TC-CRED-06":"PASS","TC-CRED-07":"FAIL","TC-CRYPTO-01":"PASS","TC-CRYPTO-02":"PASS","TC-CRYPTO-03":"PASS","TC-CRYPTO-05":"PASS","TC-CRYPTO-06":"FAIL","TC-CRYPTO-08":"PASS","TC-CRYPTO-09":"PASS","TC-CRYPTO-10":"PASS","TC-CRYPTO-11":"PASS"},"framework_key":"etsi_en_303_645","mapping_sha256":"956eb0935b02c7c7606fa0cafd2b9467e1ef9388737de645513f89bdb9ef5881","profile_sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","scoring_caveat":null,"scoring_method":"severity-weighted-assessed-controls-v1","provenance_note":"Scoring, profile and available stage snapshot. Static detector/feed artifact identities remain unrecorded unless supplied by their originating stage; current feeds cannot reconstruct them.","manual_decisions":[],"mapping_snapshot":{"TC-ATK-01":{"id":"TC-ATK-01","name":"Telnet service detection","phase":1,"category":"Attack_Surface","severity":"CRITICAL","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"Telnet absent or explicitly disabled"},"TC-ATK-02":{"id":"TC-ATK-02","name":"FTP service detection","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"No FTP service enabled"},"TC-ATK-03":{"id":"TC-ATK-03","name":"Debug tool presence","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-6"},"pass_condition":"No debug tools in filesystem"},"TC-ATK-04":{"id":"TC-ATK-04","name":"UART debug shell detection","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-4"},"pass_condition":"No UART shell spawned at boot"},"TC-ATK-05":{"id":"TC-ATK-05","name":"Unnecessary network services","phase":2,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(g)","un_r155":"Annex 5 Part A 4.3.7 (29.1)","fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.6-1, 5.6-5"},"pass_condition":"All enabled services functionally justified"},"TC-ATK-06":{"id":"TC-ATK-06","name":"Web interface privilege check","phase":3,"category":"Attack_Surface","severity":"HIGH","frameworks":{"fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-7"},"pass_condition":"Web server runs as non-root user"},"TC-ATK-07":{"id":"TC-ATK-07","name":"Vulnerability disclosure policy presence","phase":3,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"fda_524b":"(b)(2)","iso_21434":"8.3","tec_31318":"3.2","en_18031_1":"GEC-2","iec_81001_5_1":"6.2","etsi_en_303_645":"5.2-1"},"pass_condition":"RFC 9116 security.txt found in the firmware filesystem"},"TC-ATK-08":{"id":"TC-ATK-08","name":"Brute-force protection on network authentication","phase":1,"category":"Attack_Surface","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","fda_524b":"(b)(2)","iec_62443":"CR 1.11","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-5"},"pass_condition":"A rate limit, lockout or retry counter protects every network authentication surface the firmware exposes"},"TC-ATK-09":{"id":"TC-ATK-09","name":"Pre-authentication information disclosure","phase":1,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(k)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.1, 3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-2"},"pass_condition":"No banner presented before authentication names the product and its firmware version"},"TC-ATK-10":{"id":"TC-ATK-10","name":"Redundant root-privileged account","phase":1,"category":"Attack_Surface","severity":"CRITICAL","frameworks":{"fda_524b":"(b)(2)","iec_62443":"CR 2.1","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","etsi_en_303_645":"5.6-7"},"pass_condition":"root is the only account with UID 0; every other account has its own non-zero UID"},"TC-ATK-11":{"id":"TC-ATK-11","name":"Security event logging present","phase":1,"category":"Attack_Surface","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 2(m)","fda_524b":"(b)(2)","iec_62443":"CR 6.1","iso_21434":"10.4.2","tec_31318":"3.10","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_800_193":"4.1.4"},"pass_condition":"The firmware ships a logging facility and starts it, so authentication, configuration and update events are recorded"},"TC-ATK-12":{"id":"TC-ATK-12","name":"Management interface served over cleartext HTTP","phase":1,"category":"Attack_Surface","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(2)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"GEC-2","owasp_fstm":"Stage 5","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5-1"},"pass_condition":"Every web management interface is served over TLS; no HTTP listener without an HTTPS counterpart"},"TC-BIN-01":{"id":"TC-BIN-01","name":"Stack canary detection","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Stack canaries present in critical binaries"},"TC-BIN-02":{"id":"TC-BIN-02","name":"NX/DEP bit verification","phase":3,"category":"Binary_Hardening","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"GNU_STACK segment is non-executable"},"TC-BIN-03":{"id":"TC-BIN-03","name":"PIE/ASLR verification","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Critical binaries compiled as ET_DYN (PIE enabled)"},"TC-BIN-04":{"id":"TC-BIN-04","name":"RELRO configuration","phase":3,"category":"Binary_Hardening","severity":"LOW","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"Full RELRO enabled (RELRO + BIND_NOW)"},"TC-BIN-05":{"id":"TC-BIN-05","name":"Debug symbol stripping","phase":3,"category":"Binary_Hardening","severity":"LOW","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"No debug sections in production binaries"},"TC-BIN-06":{"id":"TC-BIN-06","name":"Insecure RPATH/RUNPATH","phase":3,"category":"Binary_Hardening","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28)","fda_524b":"(b)(2)","iso_21434":"10.4.2","tec_31318":"3.6","en_18031_1":"GEC-1","owasp_fstm":"Stage 5","iec_81001_5_1":"5.4"},"pass_condition":"No RPATH/RUNPATH with relative or world-writable paths"},"TC-CVE-01":{"id":"TC-CVE-01","name":"OS and kernel CVE scan","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CVEs with CVSS >= 7.0 for detected OS/kernel version"},"TC-CVE-02":{"id":"TC-CVE-02","name":"BusyBox CVE scan","phase":3,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","etsi_en_303_645":"5.3"},"pass_condition":"BusyBox has no CVEs with CVSS >= 7.0"},"TC-CVE-03":{"id":"TC-CVE-03","name":"TLS library CVE check","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","etsi_en_303_645":"5.3"},"pass_condition":"TLS library has no CVEs with CVSS >= 7.0"},"TC-CVE-04":{"id":"TC-CVE-04","name":"SBOM generation","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","fda_524b":"(b)(3)","iso_21434":"8.5, 8.6","tec_31318":"3.3","iec_81001_5_1":"5.2.4","nist_ir_8259a":"Capability 6","etsi_en_303_645":"5.3"},"pass_condition":"SBOM generated covering >80% of identified binary components"},"TC-CVE-05":{"id":"TC-CVE-05","name":"Known vulnerable binary hash match","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.6 (22)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1"},"pass_condition":"No hash matches against known malicious binary database"},"TC-CVE-06":{"id":"TC-CVE-06","name":"Firmware-wide critical CVE presence","phase":1,"category":"Known_Vulnerabilities","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CRITICAL-severity CVE findings anywhere in the firmware image"},"TC-CVE-07":{"id":"TC-CVE-07","name":"CVE regression from prior firmware version","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1"},"pass_condition":"No new CVE introduced relative to the prior analyzed version of this firmware"},"TC-CVE-08":{"id":"TC-CVE-08","name":"Any component has a HIGH-or-above or known-exploited CVE","phase":1,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No CVE with CVSS >= 7.0, and no CISA-KEV-listed CVE, in any component"},"TC-CVE-09":{"id":"TC-CVE-09","name":"End-of-life component in the SBOM","phase":2,"category":"Known_Vulnerabilities","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 1","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iso_21434":"8.5, 8.6","tec_31318":"3.3","owasp_fstm":"Stage 5","iec_81001_5_1":"6.1","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3"},"pass_condition":"No SBOM component is past its upstream end of life (engine/intelligence/eol_components.py's dated support table)"},"TC-RUN-01":{"id":"TC-RUN-01","name":"Memory-safety fault under adversarial input","phase":2,"category":"Runtime_Behaviour","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 7","etsi_en_303_645":"5.13-1"},"pass_condition":"No memory-safety fault (SIGSEGV/SIGBUS/SIGILL, or a libc hardening abort) was reproduced while emulating this firmware's binaries with adversarial argv, environment or stdin"},"TC-RUN-02":{"id":"TC-RUN-02","name":"Sandbox network service and process execution observed","phase":2,"category":"Runtime_Behaviour","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 7","etsi_en_303_645":"5.13-1"},"pass_condition":"No binary was observed both serving a listening socket and executing an external program or shell interpreter in the same emulated run"},"TC-UPD-01":{"id":"TC-UPD-01","name":"Update signature verification presence","phase":1,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.2","iec_81001_5_1":"7.2","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3-9, 5.3-10"},"pass_condition":"Signature verification present (RSA-2048+, ECDSA P-256+, Ed25519)"},"TC-UPD-02":{"id":"TC-UPD-02","name":"Update channel encryption","phase":2,"category":"Firmware_Update","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","iec_81001_5_1":"7.2","nist_ir_8259a":"Capability 5","etsi_en_303_645":"5.3-2, 5.3-7"},"pass_condition":"All update URLs use HTTPS; TLS library present in update handler"},"TC-UPD-03":{"id":"TC-UPD-03","name":"Rollback protection","phase":3,"category":"Firmware_Update","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.3","iec_81001_5_1":"7.2"},"pass_condition":"Version comparison logic present that rejects older versions"},"TC-UPD-04":{"id":"TC-UPD-04","name":"Pre-installation integrity check","phase":2,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.2","iec_81001_5_1":"7.2","etsi_en_303_645":"5.3-9"},"pass_condition":"Hash verification call present before any flash write"},"TC-UPD-05":{"id":"TC-UPD-05","name":"Unsigned update rejection","phase":1,"category":"Firmware_Update","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 3","un_r155":"Annex 5 Part A 4.3.3 (11)","fda_524b":"(b)(1)","iso_21434":"13.4","tec_31318":"3.3","en_18031_1":"SUM-1","en_18031_3":"RED 3.3(f) - SUM","nist_800_193":"4.1.1","iec_81001_5_1":"7.2"},"pass_condition":"All code paths after signature failure lead to abort"},"TC-BOOT-01":{"id":"TC-BOOT-01","name":"Bootloader signature verification","phase":1,"category":"Secure_Boot","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(j)","un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.1.1","etsi_en_303_645":"5.7-1"},"pass_condition":"Signature verification present in bootloader"},"TC-BOOT-02":{"id":"TC-BOOT-02","name":"Boot measurement capability","phase":3,"category":"Secure_Boot","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.2.3"},"pass_condition":"TPM driver or IMA configuration present"},"TC-BOOT-03":{"id":"TC-BOOT-03","name":"Recovery partition presence","phase":3,"category":"Secure_Boot","severity":"MEDIUM","frameworks":{"eu_cra":"Annex I Part I 3","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.9","en_18031_1":"RLM-1","nist_800_193":"4.3.1"},"pass_condition":"Recovery partition or dual-bank mechanism identified"},"TC-BOOT-04":{"id":"TC-BOOT-04","name":"Runtime integrity verification","phase":3,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(j)","un_r155":"Annex 5 Part A 4.3.6 (23)","fda_524b":"(b)(1)","iso_21434":"10.4.1","tec_31318":"3.7","en_18031_1":"RLM-1","nist_800_193":"4.2.1","etsi_en_303_645":"5.7-1"},"pass_condition":"Integrity hash computed and verified at boot"},"TC-BOOT-05":{"id":"TC-BOOT-05","name":"No published test keys in Secure Boot databases","phase":1,"category":"Secure_Boot","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(j)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","en_18031_1":"RLM-1","nist_800_193":"4.1.1","etsi_en_303_645":"5.7-1"},"pass_condition":"No PK, KEK or db certificate is a published test key (PKfail)"},"TC-BOOT-06":{"id":"TC-BOOT-06","name":"Secure Boot revocation list (dbx) current","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(j)","fda_524b":"(b)(1)","iec_62443":"CR 3.4","iso_21434":"10.4.1","en_18031_1":"RLM-1","nist_800_193":"4.1.1"},"pass_condition":"dbx carries the published revocations"},"TC-BOOT-07":{"id":"TC-BOOT-07","name":"No firmware module with a published vulnerability","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(a)","fda_524b":"(b)(1)","iso_21434":"10.4.1","en_18031_1":"RLM-1"},"pass_condition":"No module matches a vulnerable advisory entry"},"TC-BOOT-08":{"id":"TC-BOOT-08","name":"No SMM callouts","phase":1,"category":"Secure_Boot","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(a)","fda_524b":"(b)(1)","iso_21434":"10.4.1","en_18031_1":"RLM-1"},"pass_condition":"SMI handlers call no Boot or Runtime Services"},"TC-CODE-01":{"id":"TC-CODE-01","name":"Command or code injection in shipped scripts","phase":1,"category":"Code_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script passes externally-influenced data into a shell, an exec call or a code-evaluation construct (CWE-78, CWE-88, CWE-94, CWE-95)"},"TC-CODE-02":{"id":"TC-CODE-02","name":"Untrusted input rendered by the device web interface","phase":1,"category":"Code_Security","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No page served by the device writes externally-influenced data into the DOM without escaping it (CWE-79)"},"TC-CODE-03":{"id":"TC-CODE-03","name":"Untrusted input selects a file path","phase":1,"category":"Code_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script uses externally-influenced data to choose a file to read, write or include (CWE-22, CWE-98)"},"TC-CODE-04":{"id":"TC-CODE-04","name":"Untrusted data parsed by an interpreter or database","phase":1,"category":"Code_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.1)","fda_524b":"(b)(2)","iec_62443":"CR 3.5","iso_21434":"10.4.2","tec_31318":"3.13","owasp_fstm":"Stage 5","etsi_en_303_645":"5.13-1"},"pass_condition":"No shipped script deserializes externally-influenced data or builds a database query from it (CWE-502, CWE-89)"},"TC-CRED-01":{"id":"TC-CRED-01","name":"Hardcoded credential detection","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-1"},"pass_condition":"No hardcoded credential pairs found"},"TC-CRED-02":{"id":"TC-CRED-02","name":"Default credential database match","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(a)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.1","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 2","etsi_en_303_645":"5.1-1, 5.1-2"},"pass_condition":"No matches against default credential database"},"TC-CRED-03":{"id":"TC-CRED-03","name":"Password hash strength assessment","phase":3,"category":"Credential_Security","severity":"HIGH","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-1"},"pass_condition":"All hashes use SHA-512 ($6$) or yescrypt ($y$) minimum"},"TC-CRED-04":{"id":"TC-CRED-04","name":"API key and token detection","phase":3,"category":"Credential_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2"},"pass_condition":"No API keys or tokens detected"},"TC-CRED-05":{"id":"TC-CRED-05","name":"Embedded private key detection","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(b)","un_r155":"Annex 5 Part A 4.3.6 (19.3)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-3"},"pass_condition":"No private keys found"},"TC-CRED-06":{"id":"TC-CRED-06","name":"Credentials stored in clear text on the device","phase":1,"category":"Credential_Security","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(c)","un_r155":"Annex 5 Part A 4.3.6 (19)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.4","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","etsi_en_303_645":"5.4-1"},"pass_condition":"No configuration file on the device holds a password, key or token as a literal value rather than a hash, reference or encrypted blob"},"TC-CRED-07":{"id":"TC-CRED-07","name":"Account with no password set","phase":1,"category":"Credential_Security","severity":"CRITICAL","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (28.2)","fda_524b":"(b)(1)","iec_62443":"CR 1.5","iso_21434":"10.4.2","tec_31318":"3.1","en_18031_1":"AUM-1","en_18031_2":"SSM-1","en_18031_3":"RED 3.3(f) - AUM","owasp_fstm":"Stage 5","iec_81001_5_1":"5.2.2","nist_ir_8259a":"Capability 4","etsi_en_303_645":"5.1-1"},"pass_condition":"No account in the device's credential databases has an empty password field"},"TC-CRYPTO-01":{"id":"TC-CRYPTO-01","name":"MD5 usage in security context","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"MD5 absent from security-critical code paths"},"TC-CRYPTO-02":{"id":"TC-CRYPTO-02","name":"SHA-1 usage in security context","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"SHA-1 absent from security-critical code paths"},"TC-CRYPTO-03":{"id":"TC-CRYPTO-03","name":"Deprecated cipher detection (DES/3DES/RC4)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No use of DES, 3DES, or RC4 detected"},"TC-CRYPTO-04":{"id":"TC-CRYPTO-04","name":"RSA key length validation","phase":3,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2"},"pass_condition":"All RSA keys are 2048 bits or larger"},"TC-CRYPTO-05":{"id":"TC-CRYPTO-05","name":"TLS version enforcement","phase":3,"category":"Cryptography","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"Only TLS 1.2 and 1.3 enabled"},"TC-CRYPTO-06":{"id":"TC-CRYPTO-06","name":"Certificate validation","phase":3,"category":"Cryptography","severity":"MEDIUM","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"No self-signed certs in production; no expired certs"},"TC-CRYPTO-07":{"id":"TC-CRYPTO-07","name":"Hardcoded IV/salt detection","phase":3,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2"},"pass_condition":"IVs and salts are generated dynamically"},"TC-CRYPTO-08":{"id":"TC-CRYPTO-08","name":"Deprecated SSL protocol versions (SSLv2/SSLv3)","phase":2,"category":"Cryptography","severity":"CRITICAL","frameworks":{"un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","nist_ir_8259a":"Capability 3","etsi_en_303_645":"5.5"},"pass_condition":"No SSLv2 or SSLv3 protocol support detected"},"TC-CRYPTO-09":{"id":"TC-CRYPTO-09","name":"Broken hash algorithm (MD4)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"MD4 absent from security-critical code paths"},"TC-CRYPTO-10":{"id":"TC-CRYPTO-10","name":"Weak or null cipher (RC2, null cipher suite)","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No RC2 or null cipher suite detected"},"TC-CRYPTO-11":{"id":"TC-CRYPTO-11","name":"ECB block-cipher mode","phase":2,"category":"Cryptography","severity":"HIGH","frameworks":{"eu_cra":"Annex I Part I 2(d)","un_r155":"Annex 5 Part A 4.3.7 (26)","fda_524b":"(b)(1)","iec_62443":"CR 4.1","iso_21434":"10.4.2","tec_31318":"3.5","en_18031_1":"CRY-1","en_18031_2":"SCM-1","en_18031_3":"RED 3.3(f) - CRY","owasp_fstm":"Stage 5","iec_81001_5_1":"4.2","etsi_en_303_645":"5.5"},"pass_condition":"No ECB mode encryption detected"}},"profile_snapshot":null,"severity_weights":{"LOW":1,"HIGH":15,"MEDIUM":5,"CRITICAL":40},"framework_version":"v2.1.1","environment_artifact":null,"input_stage_versions":{"runtime":null,"source_scan":{"status":"complete","findings":56,"truncated":null,"files_found":116,"completed_at":"2026-10-10T06:46:54.176998+00:00","assessment_id":"23d691cb-de7e-4d36-a5a0-4a5a94978278","files_scanned":116,"engine_artifact":null,"provenance_note":"Configured sandbox artifact digest; unknown if not supplied.","orchestrator_build":"unknown"},"firmware_sha256":"00bd253bfce5ea2d87c430dbbddc21528757b059d5b67b57b8f31397ddc7abbb"},"scoring_engine_build":"unknown","scored_on_partial_read":false,"automated_check_results":{"TC-ATK-01":"PASS","TC-ATK-02":"PASS","TC-ATK-03":"FAIL","TC-ATK-04":"FAIL","TC-ATK-05":"PASS","TC-ATK-06":"PASS","TC-ATK-07":"NOT_ASSESSED","TC-ATK-08":"PASS","TC-ATK-09":"FAIL","TC-ATK-10":"PASS","TC-ATK-12":"FAIL","TC-CVE-01":"PASS","TC-CVE-02":"PASS","TC-CVE-03":"PASS","TC-CVE-04":"PASS","TC-CVE-06":"PASS","TC-CVE-08":"PASS","TC-CVE-09":"PASS","TC-RUN-01":"NOT_ASSESSED","TC-RUN-02":"NOT_ASSESSED","TC-UPD-01":"FAIL","TC-UPD-02":"PASS","TC-UPD-04":"NOT_ASSESSED","TC-BOOT-01":"NOT_ASSESSED","TC-BOOT-04":"FAIL","TC-BOOT-05":"NOT_APPLICABLE","TC-CODE-01":"FAIL","TC-CODE-02":"PASS","TC-CODE-03":"PASS","TC-CODE-04":"FAIL","TC-CRED-01":"PASS","TC-CRED-02":"PASS","TC-CRED-03":"PASS","TC-CRED-05":"PASS","TC-CRED-06":"PASS","TC-CRED-07":"FAIL","TC-CRYPTO-01":"PASS","TC-CRYPTO-02":"PASS","TC-CRYPTO-03":"PASS","TC-CRYPTO-05":"PASS","TC-CRYPTO-06":"FAIL","TC-CRYPTO-08":"PASS","TC-CRYPTO-09":"PASS","TC-CRYPTO-10":"PASS","TC-CRYPTO-11":"PASS"}}}],"firmware":{"sha256":"00bd253bfce5ea2d87c430dbbddc21528757b059d5b67b57b8f31397ddc7abbb","size_bytes":4142444,"detected_format":"gzip","uploaded_at":"2026-10-10T06:46:36.530559+00:00"},"engine":{"build":"unknown","context_scope":"Current service; not necessarily the engine used by this assessment","environment_artifact":null,"extraction_root_recorded":true,"extraction_quality":{"status":"complete","is_monolithic":false,"rtos_detected":false},"limits":{"max_upload_bytes":17179869184}},"feeds":{"context_scope":"Current feed freshness; not the feed snapshot used by earlier assessments","nvd_last_sync":"2026-10-10T06:32:43.571477+00:00","nvd_cves_in_last_sync":8449,"epss_snapshot":{"source":"https://epss.empiricalsecurity.com/epss_scores-2026-10-09.csv.gz","sha256":"2470f5eb7f664dd283678d51baeb64a7d3749c2182c4b0b17ccd907573b8432e"}},"assessments":{"compliance_evaluated_at":"2026-10-10T06:55:41.488340+00:00","security_tests_evaluated_at":"2026-10-10T06:55:41.537182+00:00","sast":{"status":"complete","findings":56,"truncated":null,"files_found":116,"completed_at":"2026-10-10T06:46:54.176998+00:00","assessment_id":"23d691cb-de7e-4d36-a5a0-4a5a94978278","files_scanned":116,"engine_artifact":null,"provenance_note":"Configured sandbox artifact digest; unknown if not supplied.","orchestrator_build":"unknown"},"dynamic_run":{"id":"d9e47ccd-8534-43f3-8e55-05a1dbbccf75","status":"complete","tier":"tier1","assessment_context":{"mode":"tier1","scope":"Recorded emulation inputs; deployed-device reachability unassessed","tier2":null,"run_id":32,"engine_build":"unknown","fuzz_complete":true,"execution_profile":{"crash_probe":true,"daemon_probe":"no-arguments","fuzz_enabled":false,"fuzz_seconds":0,"fuzz_targets":0,"max_binaries":0,"baseline_argv":["--help"],"fuzz_executions":1200,"timeout_seconds":5,"max_crash_probes":0,"max_fuzz_targets":0,"run_budget_seconds":2400,"mcu_run_timeout_seconds":30,"esp_boot_timeout_seconds":45},"crash_probe_complete":true,"environment_artifact":null,"fuzz_targets_available":0,"target_selection_complete":true},"completed_at":"2026-10-10T06:55:27.192525+00:00","binaries_supported":46,"binaries_executed":46},"threat_model_generated_at":"2026-10-10T06:55:55.190611+00:00","threat_model_framework":"HYBRID"},"analysis_profile":null}