{"fw": {"name": "OpenWrt 23.05.5 armsr-armv8 rootfs", "vendor": "OpenWrt", "version": "23.05.5", "device_type": "consumer_router", "detected_format": "gzip", "overall_risk_score": 10.0, "analysis_status": "complete", "extraction_warning": null, "sha256": "00bd253bfce5ea2d87c430dbbddc21528757b059d5b67b57b8f31397ddc7abbb", "file_size_fmt": "4.0 MB", "binary_count": 191, "degraded_binary_count": 0, "degraded_architectures": [], "coverage_warning": null, "sbom_count": 33, "critical_count": 14, "high_count": 197, "medium_count": 120, "low_count": 108, "total_finding_count": 451, "total_reachability_proof_count": 0}, "risk_class": "critical", "generated_at": "2026-10-10 06:58", "frameworks": [{"name": "ETSI EN 303 645", "score": 64.04494382022472, "grade": "D", "pass_count": 25, "fail_count": 16, "checks_graded": 41, "checks_assessed": 45}, {"name": "OWASP Firmware Security Testing Methodology", "score": 68.70748299319727, "grade": "C", "pass_count": 29, "fail_count": 17, "checks_graded": 46, "checks_assessed": 47}], "scorecard": {"total_run": 52, "passed": 33, "failed": 19, "grade": "F", "pass_pct": 63.5, "basis": "Distinct technical check IDs across mapped frameworks; most conservative recorded result", "grade_basis": "Security test suite score; separate from the raw technical-check pass rate", "not_assessed": 4, "not_applicable": 1}, "security_suite": {"passed": 19, "failed": 17, "assessed": 37, "unassessed": 17, "not_applicable": 0, "grade": "F", "pass_pct": 51.3}, "test_cases": [{"tc_id": "TC-ATK-01", "name": "Telnet service detection", "severity": "CRITICAL", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.6-1, 5.6-5", "NIST IR 8259A - Capability 4", "IEC 62443-4-2 - CR 2.1", "EN 18031-1 - GEC-2", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.6", "UN R155 - Annex 5 Part A 4.3.7 (29.1)", "CWE-319"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-ATK-02", "name": "FTP service detection", "severity": "HIGH", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.6-1, 5.6-5", "IEC 62443-4-2 - CR 2.1", "EN 18031-1 - GEC-2", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.6", "UN R155 - Annex 5 Part A 4.3.7 (29.1)", "CWE-319"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-ATK-03", "name": "Debug tool presence", "severity": "HIGH", "result": "FAIL", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.6-6", "IEC 62443-4-2 - CR 2.1", "EN 18031-1 - GEC-2", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.6", "UN R155 - Annex 5 Part A 4.3.7 (28.2)", "CWE-489"], "remediation_steps": ["Remove debug tooling (gdbserver, strace, tcpdump, netcat, compilers) from production images.", "Move these tools to a separate development/debug image variant that is never shipped to customers.", "Add a build-time manifest check that fails if any debug tool package is present in the production image."], "remediation_yocto": "Split `IMAGE_INSTALL` between a `*-dev` image (with `tools-debug`, `dev-pkgs` IMAGE_FEATURES) and the production image; ensure production images don't include `IMAGE_FEATURES += \"tools-debug debug-tweaks\"`."}, {"tc_id": "TC-ATK-04", "name": "UART debug shell detection", "severity": "HIGH", "result": "FAIL", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.6-4", "IEC 62443-4-2 - CR 2.1", "EN 18031-1 - GEC-2", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.6", "UN R155 - Annex 5 Part A 4.3.7 (28.2)", "CWE-306"], "remediation_steps": ["Disable the UART console/shell in production builds (remove the `getty`/shell spawn on the serial line from inittab or the systemd unit).", "If UART access is needed for field diagnostics, gate it behind an authenticated unlock mechanism (e.g. signed challenge-response).", "Confirm physical UART pins are not silk-screen labeled or easily accessible if the shell cannot be fully removed."], "remediation_yocto": "Remove the serial `getty` entry from `/etc/inittab` (sysvinit) or mask the `serial-getty@ttyS0.service` (systemd) in the image recipe for production builds; keep it only in a debug image variant."}, {"tc_id": "TC-ATK-05", "name": "Unnecessary network services", "severity": "MEDIUM", "result": "PASS", "framework_clauses": ["ETSI EN 303 645 - 5.6-1, 5.6-5", "NIST IR 8259A - Capability 4", "IEC 62443-4-2 - CR 2.1", "EU CRA - Annex I Part I 2(g)", "EN 18031-1 - GEC-2", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.6", "UN R155 - Annex 5 Part A 4.3.7 (29.1)", "CWE-1327"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-ATK-06", "name": "Web interface privilege check", "severity": "HIGH", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.6-7", "IEC 62443-4-2 - CR 2.1", "EN 18031-1 - GEC-2", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.6", "CWE-250"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-ATK-07", "name": "Vulnerability disclosure policy presence", "severity": "MEDIUM", "result": "NOT_ASSESSED", "framework_clauses": ["ETSI EN 303 645 - 5.2-1", "EN 18031-1 - GEC-2", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 8.3", "IEC 81001-5-1 - 6.2", "TEC 31318 - 3.2"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-ATK-08", "name": "Brute-force protection on network authentication", "severity": "HIGH", "result": "PASS", "framework_clauses": ["ETSI EN 303 645 - 5.1-5", "IEC 62443-4-2 - CR 1.11", "EU CRA - Annex I Part I 2(d)", "NIST IR 8259A - Capability 4", "OWASP FSTM - Stage 5", "EN 18031-1 - GEC-2", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.1"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-ATK-09", "name": "Pre-authentication information disclosure", "severity": "MEDIUM", "result": "FAIL", "framework_clauses": ["ETSI EN 303 645 - 5.6-2", "EU CRA - Annex I Part I 2(k)", "OWASP FSTM - Stage 5", "EN 18031-1 - GEC-2", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.1, 3.6"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-ATK-10", "name": "Redundant root-privileged account", "severity": "CRITICAL", "result": "PASS", "framework_clauses": ["EN 18031-1 - GEC-2", "ETSI EN 303 645 - 5.6-7", "FDA 524B - (b)(2)", "IEC 62443-4-2 - CR 2.1", "OWASP FSTM - Stage 5", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.6"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-ATK-11", "name": "Security event logging present", "severity": "MEDIUM", "result": "PASS", "framework_clauses": ["EU CRA - Annex I Part I 2(m)", "IEC 62443-4-2 - CR 6.1", "NIST SP 800-193 - 4.1.4", "OWASP FSTM - Stage 5", "EN 18031-1 - GEC-2", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.10"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-ATK-12", "name": "Management interface served over cleartext HTTP", "severity": "HIGH", "result": "FAIL", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.5-1", "NIST IR 8259A - Capability 3", "IEC 62443-4-2 - CR 4.1", "EU CRA - Annex I Part I 2(d)", "EN 18031-1 - GEC-2", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.5", "UN R155 - Annex 5 Part A 4.3.7 (26)", "CWE-319"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-BIN-01", "name": "Stack canary detection", "severity": "MEDIUM", "result": "FAIL", "framework_clauses": ["OWASP FSTM - Stage 5", "EN 18031-1 - GEC-1", "IEC 81001-5-1 - 5.4", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.6", "UN R155 - Annex 5 Part A 4.3.7 (28)", "CWE-121"], "remediation_steps": ["Recompile the affected binaries with `-fstack-protector-strong` (or `-fstack-protector-all` for highest-risk binaries).", "Confirm the toolchain's libc supports `__stack_chk_fail` and links it in.", "Re-run the binary hardening check to confirm the canary is present in the compiled output."], "remediation_yocto": "Add `SECURITY_CFLAGS += \"-fstack-protector-strong\"` (or use the `meta-security` distro feature `stack-protector`) in your distro/local.conf rather than per-recipe."}, {"tc_id": "TC-BIN-02", "name": "NX/DEP bit verification", "severity": "HIGH", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "EN 18031-1 - GEC-1", "IEC 81001-5-1 - 5.4", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.6", "UN R155 - Annex 5 Part A 4.3.7 (28)", "CWE-119"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-BIN-03", "name": "PIE/ASLR verification", "severity": "MEDIUM", "result": "FAIL", "framework_clauses": ["OWASP FSTM - Stage 5", "EN 18031-1 - GEC-1", "IEC 81001-5-1 - 5.4", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.6", "UN R155 - Annex 5 Part A 4.3.7 (28)", "CWE-121"], "remediation_steps": ["Recompile critical binaries as position-independent executables (`-fPIE -pie`).", "Ensure the kernel has ASLR enabled (`/proc/sys/kernel/randomize_va_space = 2`).", "Re-check binary type is `ET_DYN` (PIE) rather than `ET_EXEC`."], "remediation_yocto": "Enable the `pie` security flag via `SECURITY_CFLAGS`/`SECURITY_LDFLAGS` (Yocto's `security_flags.inc`); some BSP recipes explicitly disable PIE for bootloaders/init - confirm that's intentional and documented."}, {"tc_id": "TC-BIN-04", "name": "RELRO configuration", "severity": "LOW", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "EN 18031-1 - GEC-1", "IEC 81001-5-1 - 5.4", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.6", "UN R155 - Annex 5 Part A 4.3.7 (28)", "CWE-1188"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-BIN-05", "name": "Debug symbol stripping", "severity": "LOW", "result": "FAIL", "framework_clauses": ["OWASP FSTM - Stage 5", "EN 18031-1 - GEC-1", "IEC 81001-5-1 - 5.4", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.6", "UN R155 - Annex 5 Part A 4.3.7 (28.2)", "CWE-215"], "remediation_steps": ["Strip debug sections (`.debug_*`, `.symtab` where not required) from production binaries with `strip --strip-unneeded`.", "Keep unstripped copies + debug symbols (`.debug` packages or a symbol server) for internal crash-analysis only - never ship them.", "Add a build-time check that fails the image build if any installed binary still contains debug sections."], "remediation_yocto": "Yocto strips by default via `INHIBIT_PACKAGE_STRIP = \"0\"` and `do_package` splitting `-dbg` packages - confirm `-dbg` packages aren't accidentally included in `IMAGE_INSTALL` for production images."}, {"tc_id": "TC-BIN-06", "name": "Insecure RPATH/RUNPATH", "severity": "MEDIUM", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "EN 18031-1 - GEC-1", "IEC 81001-5-1 - 5.4", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.6", "UN R155 - Annex 5 Part A 4.3.7 (28)", "CWE-426"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-BOOT-01", "name": "Bootloader signature verification", "severity": "CRITICAL", "result": "NOT_ASSESSED", "framework_clauses": ["NIST SP 800-193 - 4.1.1", "ETSI EN 303 645 - 5.7-1", "IEC 62443-4-2 - CR 3.4", "EU CRA - Annex I Part I 2(j)", "EN 18031-1 - RLM-1", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.1", "TEC 31318 - 3.7", "UN R155 - Annex 5 Part A 4.3.6 (23)", "CWE-347"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-BOOT-04", "name": "Runtime integrity verification", "severity": "HIGH", "result": "FAIL", "framework_clauses": ["NIST SP 800-193 - 4.2.1", "ETSI EN 303 645 - 5.7-1", "EU CRA - Annex I Part I 2(j)", "EN 18031-1 - RLM-1", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.1", "TEC 31318 - 3.7", "UN R155 - Annex 5 Part A 4.3.6 (23)", "CWE-354"], "remediation_steps": ["Compute a cryptographic hash (or signature) over critical runtime partitions/binaries at boot time.", "Verify the computed hash against an expected value stored in protected storage before continuing boot.", "Define and test the failure behavior (halt, recovery boot, or alert) when verification fails."], "remediation_yocto": "Enable dm-verity for the rootfs partition (`CONFIG_DM_VERITY` in the kernel, plus `IMAGE_FSTYPES` integration) so runtime integrity is enforced transparently by the block layer."}, {"tc_id": "TC-BOOT-05", "name": "No published test keys in Secure Boot databases", "severity": "CRITICAL", "result": "NOT_APPLICABLE", "framework_clauses": ["NIST SP 800-193 - 4.1.1", "ETSI EN 303 645 - 5.7-1", "IEC 62443-4-2 - CR 3.4", "EU CRA - Annex I Part I 2(j)", "EN 18031-1 - RLM-1", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.1", "CWE-1394", "CWE-321"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CODE-01", "name": "Command or code injection in shipped scripts", "severity": "CRITICAL", "result": "FAIL", "framework_clauses": ["ETSI EN 303 645 - 5.13-1", "IEC 62443-4-2 - CR 3.5", "OWASP FSTM - Stage 5", "EU CRA - Annex I Part I 2(b)", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.13", "UN R155 - Annex 5 Part A 4.3.7 (28.1)"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CODE-02", "name": "Untrusted input rendered by the device web interface", "severity": "MEDIUM", "result": "PASS", "framework_clauses": ["ETSI EN 303 645 - 5.13-1", "IEC 62443-4-2 - CR 3.5", "OWASP FSTM - Stage 5", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.13", "UN R155 - Annex 5 Part A 4.3.7 (28.1)"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CODE-03", "name": "Untrusted input selects a file path", "severity": "HIGH", "result": "PASS", "framework_clauses": ["ETSI EN 303 645 - 5.13-1", "IEC 62443-4-2 - CR 3.5", "OWASP FSTM - Stage 5", "EU CRA - Annex I Part I 2(b)", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.13", "UN R155 - Annex 5 Part A 4.3.7 (28.1)"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CODE-04", "name": "Untrusted data parsed by an interpreter or database", "severity": "HIGH", "result": "FAIL", "framework_clauses": ["ETSI EN 303 645 - 5.13-1", "IEC 62443-4-2 - CR 3.5", "OWASP FSTM - Stage 5", "EU CRA - Annex I Part I 2(b)", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.13", "UN R155 - Annex 5 Part A 4.3.7 (28.1)"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRED-01", "name": "Hardcoded credential detection", "severity": "CRITICAL", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.1-1", "NIST IR 8259A - Capability 4", "IEC 62443-4-2 - CR 1.5", "EU CRA - Annex I Part I 2(b)", "EN 18031-1 - AUM-1", "EN 18031-2 - SSM-1", "EN 18031-3 - RED 3.3(f) - AUM", "IEC 81001-5-1 - 5.2.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.1", "UN R155 - Annex 5 Part A 4.3.7 (28.2)", "CWE-798"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRED-02", "name": "Default credential database match", "severity": "CRITICAL", "result": "PASS", "framework_clauses": ["ETSI EN 303 645 - 5.1-1, 5.1-2", "NIST IR 8259A - Capability 2", "IEC 62443-4-2 - CR 1.1", "EU CRA - Annex I Part I 2(a)", "EN 18031-1 - AUM-1", "EN 18031-2 - SSM-1", "EN 18031-3 - RED 3.3(f) - AUM", "IEC 81001-5-1 - 5.2.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.1", "UN R155 - Annex 5 Part A 4.3.7 (28.2)", "CWE-798", "CWE-259"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRED-03", "name": "Password hash strength assessment", "severity": "HIGH", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.4-1", "IEC 62443-4-2 - CR 1.5", "EN 18031-1 - AUM-1", "EN 18031-2 - SSM-1", "EN 18031-3 - RED 3.3(f) - AUM", "IEC 81001-5-1 - 5.2.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.4", "UN R155 - Annex 5 Part A 4.3.7 (26)", "CWE-916"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRED-04", "name": "API key and token detection", "severity": "HIGH", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "IEC 62443-4-2 - CR 1.5", "EU CRA - Annex I Part I 2(b)", "EN 18031-1 - AUM-1", "EN 18031-2 - SSM-1", "EN 18031-3 - RED 3.3(f) - AUM", "IEC 81001-5-1 - 5.2.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.4", "UN R155 - Annex 5 Part A 4.3.7 (28.2)", "CWE-798"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRED-05", "name": "Embedded private key detection", "severity": "CRITICAL", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.4-3", "IEC 62443-4-2 - CR 1.5", "EU CRA - Annex I Part I 2(b)", "EN 18031-1 - AUM-1", "EN 18031-2 - SSM-1", "EN 18031-3 - RED 3.3(f) - AUM", "IEC 81001-5-1 - 5.2.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.4", "UN R155 - Annex 5 Part A 4.3.6 (19.3)", "CWE-321"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRED-06", "name": "Credentials stored in clear text on the device", "severity": "HIGH", "result": "PASS", "framework_clauses": ["ETSI EN 303 645 - 5.4-1", "EU CRA - Annex I Part I 2(c)", "IEC 62443-4-2 - CR 4.1", "OWASP FSTM - Stage 5", "EN 18031-1 - AUM-1", "EN 18031-2 - SSM-1", "EN 18031-3 - RED 3.3(f) - AUM", "IEC 81001-5-1 - 5.2.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.4", "UN R155 - Annex 5 Part A 4.3.6 (19)"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRED-07", "name": "Account with no password set", "severity": "CRITICAL", "result": "FAIL", "framework_clauses": ["ETSI EN 303 645 - 5.1-1", "IEC 62443-4-2 - CR 1.5", "EU CRA - Annex I Part I 2(d)", "NIST IR 8259A - Capability 4", "OWASP FSTM - Stage 5", "EN 18031-1 - AUM-1", "EN 18031-2 - SSM-1", "EN 18031-3 - RED 3.3(f) - AUM", "IEC 81001-5-1 - 5.2.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.1", "UN R155 - Annex 5 Part A 4.3.7 (28.2)"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRYPTO-01", "name": "MD5 usage in security context", "severity": "HIGH", "result": "FAIL", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.5", "IEC 62443-4-2 - CR 4.1", "EU CRA - Annex I Part I 2(d)", "EN 18031-1 - CRY-1", "EN 18031-2 - SCM-1", "EN 18031-3 - RED 3.3(f) - CRY", "IEC 81001-5-1 - 4.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.5", "UN R155 - Annex 5 Part A 4.3.7 (26)", "CWE-327"], "remediation_steps": ["Locate all uses of MD5 in security-relevant code paths (auth, integrity, signing).", "Replace MD5 with SHA-256 or SHA-3 for any integrity/authentication purpose.", "Where MD5 is used only for non-security checksums (e.g. cache keys), document the exception and ensure it cannot be reached by an attacker-controlled path."], "remediation_yocto": "Grep linked libraries for `MD5_Init`/`MD5_Update` symbols; if pulled in transitively via an old OpenSSL 1.0.x recipe, bump `PREFERRED_VERSION_openssl` to 3.x."}, {"tc_id": "TC-CRYPTO-02", "name": "SHA-1 usage in security context", "severity": "HIGH", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.5", "IEC 62443-4-2 - CR 4.1", "EU CRA - Annex I Part I 2(d)", "EN 18031-1 - CRY-1", "EN 18031-2 - SCM-1", "EN 18031-3 - RED 3.3(f) - CRY", "IEC 81001-5-1 - 4.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.5", "UN R155 - Annex 5 Part A 4.3.7 (26)", "CWE-327"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRYPTO-03", "name": "Deprecated cipher detection (DES/3DES/RC4)", "severity": "HIGH", "result": "FAIL", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.5", "IEC 62443-4-2 - CR 4.1", "EU CRA - Annex I Part I 2(d)", "EN 18031-1 - CRY-1", "EN 18031-2 - SCM-1", "EN 18031-3 - RED 3.3(f) - CRY", "IEC 81001-5-1 - 4.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.5", "UN R155 - Annex 5 Part A 4.3.7 (26)", "CWE-327"], "remediation_steps": ["Identify all uses of DES, 3DES, or RC4 and the data they protect.", "Replace with AES-128/256-GCM or ChaCha20-Poly1305.", "Re-key any data previously protected with the deprecated cipher."], "remediation_yocto": "Disable legacy ciphers at the crypto-library build level (e.g. mbedTLS `MBEDTLS_DES_C` off) so they can't be re-introduced by a dependency."}, {"tc_id": "TC-CRYPTO-04", "name": "RSA key length validation", "severity": "HIGH", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "IEC 62443-4-2 - CR 4.1", "EU CRA - Annex I Part I 2(d)", "EN 18031-1 - CRY-1", "EN 18031-2 - SCM-1", "EN 18031-3 - RED 3.3(f) - CRY", "IEC 81001-5-1 - 4.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.5", "UN R155 - Annex 5 Part A 4.3.7 (26)", "CWE-326"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRYPTO-05", "name": "TLS version enforcement", "severity": "MEDIUM", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.5", "NIST IR 8259A - Capability 3", "IEC 62443-4-2 - CR 4.1", "EN 18031-1 - CRY-1", "EN 18031-2 - SCM-1", "EN 18031-3 - RED 3.3(f) - CRY", "IEC 81001-5-1 - 4.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.5", "UN R155 - Annex 5 Part A 4.3.7 (26)", "CWE-326"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRYPTO-06", "name": "Certificate validation", "severity": "MEDIUM", "result": "FAIL", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.5", "NIST IR 8259A - Capability 3", "IEC 62443-4-2 - CR 4.1", "EN 18031-1 - CRY-1", "EN 18031-2 - SCM-1", "EN 18031-3 - RED 3.3(f) - CRY", "IEC 81001-5-1 - 4.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.5", "UN R155 - Annex 5 Part A 4.3.7 (26)", "CWE-295"], "remediation_steps": ["Replace self-signed certificates used in production with certificates issued by a managed internal or public CA.", "Add monitoring for certificate expiry with renewal well before the expiry date.", "Ensure the TLS client enforces full chain + hostname validation (no `verify=False`/`InsecureSkipVerify` equivalents)."], "remediation_yocto": "Audit provisioning recipes for `openssl req -x509 -days 36500` self-signed cert generation - replace with device-unique certs issued during manufacturing."}, {"tc_id": "TC-CRYPTO-07", "name": "Hardcoded IV/salt detection", "severity": "HIGH", "result": "NOT_ASSESSED", "framework_clauses": ["OWASP FSTM - Stage 5", "IEC 62443-4-2 - CR 4.1", "EU CRA - Annex I Part I 2(d)", "EN 18031-1 - CRY-1", "EN 18031-2 - SCM-1", "EN 18031-3 - RED 3.3(f) - CRY", "IEC 81001-5-1 - 4.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.5", "UN R155 - Annex 5 Part A 4.3.7 (26)", "CWE-330"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRYPTO-08", "name": "Deprecated SSL protocol versions (SSLv2/SSLv3)", "severity": "CRITICAL", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.5", "NIST IR 8259A - Capability 3", "IEC 62443-4-2 - CR 4.1", "EN 18031-1 - CRY-1", "EN 18031-2 - SCM-1", "EN 18031-3 - RED 3.3(f) - CRY", "IEC 81001-5-1 - 4.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.5", "UN R155 - Annex 5 Part A 4.3.7 (26)"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRYPTO-09", "name": "Broken hash algorithm (MD4)", "severity": "HIGH", "result": "FAIL", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.5", "IEC 62443-4-2 - CR 4.1", "EU CRA - Annex I Part I 2(d)", "EN 18031-1 - CRY-1", "EN 18031-2 - SCM-1", "EN 18031-3 - RED 3.3(f) - CRY", "IEC 81001-5-1 - 4.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.5", "UN R155 - Annex 5 Part A 4.3.7 (26)"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRYPTO-10", "name": "Weak or null cipher (RC2, null cipher suite)", "severity": "HIGH", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.5", "IEC 62443-4-2 - CR 4.1", "EU CRA - Annex I Part I 2(d)", "EN 18031-1 - CRY-1", "EN 18031-2 - SCM-1", "EN 18031-3 - RED 3.3(f) - CRY", "IEC 81001-5-1 - 4.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.5", "UN R155 - Annex 5 Part A 4.3.7 (26)"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CRYPTO-11", "name": "ECB block-cipher mode", "severity": "HIGH", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.5", "IEC 62443-4-2 - CR 4.1", "EU CRA - Annex I Part I 2(d)", "EN 18031-1 - CRY-1", "EN 18031-2 - SCM-1", "EN 18031-3 - RED 3.3(f) - CRY", "IEC 81001-5-1 - 4.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.5", "UN R155 - Annex 5 Part A 4.3.7 (26)"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CVE-01", "name": "OS and kernel CVE scan", "severity": "CRITICAL", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.3", "NIST IR 8259A - Capability 5", "EU CRA - Annex I Part I 1", "IEC 81001-5-1 - 6.1", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 8.5, 8.6", "TEC 31318 - 3.3", "UN R155 - Annex 5 Part A 4.3.7 (28.1)", "CWE-1104"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CVE-02", "name": "BusyBox CVE scan", "severity": "HIGH", "result": "FAIL", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.3", "EU CRA - Annex I Part I 1", "IEC 81001-5-1 - 6.1", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 8.5, 8.6", "TEC 31318 - 3.3", "UN R155 - Annex 5 Part A 4.3.7 (28.1)", "CWE-1104"], "remediation_steps": ["Identify the BusyBox version and check it against known CVEs with CVSS >= 7.0.", "Upgrade to the latest BusyBox release for your branch, or apply the specific security backport.", "Re-run the CVE scan to confirm the score drops below the threshold."], "remediation_yocto": "Bump `PREFERRED_VERSION_busybox` in your distro config; check `meta-oe`/`poky` for the latest maintained recipe revision."}, {"tc_id": "TC-CVE-03", "name": "TLS library CVE check", "severity": "CRITICAL", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.3", "EU CRA - Annex I Part I 1", "IEC 81001-5-1 - 6.1", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 8.5, 8.6", "TEC 31318 - 3.3", "UN R155 - Annex 5 Part A 4.3.7 (28.1)", "CWE-1104"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CVE-04", "name": "SBOM generation", "severity": "HIGH", "result": "PASS", "framework_clauses": ["NIST IR 8259A - Capability 6", "ETSI EN 303 645 - 5.3", "EU CRA - Annex I Part I 1", "IEC 81001-5-1 - 5.2.4", "FDA 524B - (b)(3)", "ISO/SAE 21434 - 8.5, 8.6", "TEC 31318 - 3.3"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CVE-05", "name": "Known vulnerable binary hash match", "severity": "CRITICAL", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "EU CRA - Annex I Part I 1", "IEC 81001-5-1 - 6.1", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 8.5, 8.6", "TEC 31318 - 3.3", "UN R155 - Annex 5 Part A 4.3.6 (22)", "CWE-1104"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CVE-06", "name": "Firmware-wide critical CVE presence", "severity": "CRITICAL", "result": "FAIL", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.3", "NIST IR 8259A - Capability 5", "EU CRA - Annex I Part I 1", "IEC 81001-5-1 - 6.1", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 8.5, 8.6", "TEC 31318 - 3.3", "UN R155 - Annex 5 Part A 4.3.7 (28.1)", "CWE-1104"], "remediation_steps": ["Review every CRITICAL-severity CVE finding in the firmware - not limited to the kernel/OS or any single component, this covers the whole image.", "Prioritize by reachability: a CRITICAL CVE confirmed reachable from a real entry point needs an immediate patch or mitigation; one confirmed unreachable is lower urgency but should still be tracked.", "Upgrade or patch each affected component to a version without the CVE, or apply a documented compensating control if an upgrade isn't immediately available."], "remediation_yocto": "Enable `cve-check.bbclass` across the whole image build, not just the kernel recipe, so every component's CVE exposure is tracked, not only the OS/kernel layer."}, {"tc_id": "TC-CVE-07", "name": "CVE regression from prior firmware version", "severity": "HIGH", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "EU CRA - Annex I Part I 1", "IEC 81001-5-1 - 6.1", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 8.5, 8.6", "TEC 31318 - 3.3", "UN R155 - Annex 5 Part A 4.3.7 (28.1)", "CWE-1104"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CVE-08", "name": "Any component has a HIGH-or-above or known-exploited CVE", "severity": "HIGH", "result": "FAIL", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.3", "NIST IR 8259A - Capability 5", "EU CRA - Annex I Part I 1", "IEC 81001-5-1 - 6.1", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 8.5, 8.6", "TEC 31318 - 3.3", "UN R155 - Annex 5 Part A 4.3.7 (28.1)"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-CVE-09", "name": "End-of-life component in the SBOM", "severity": "HIGH", "result": "PASS", "framework_clauses": ["OWASP FSTM - Stage 5", "ETSI EN 303 645 - 5.3", "NIST IR 8259A - Capability 5", "EU CRA - Annex I Part I 1", "IEC 81001-5-1 - 6.1", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 8.5, 8.6", "TEC 31318 - 3.3", "UN R155 - Annex 5 Part A 4.3.7 (28.1)", "CWE-1104"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-RUN-01", "name": "Memory-safety fault under adversarial input", "severity": "CRITICAL", "result": "PASS", "framework_clauses": ["EU CRA - Annex I Part I 2(b)", "ETSI EN 303 645 - 5.13-1", "IEC 62443-4-2 - CR 3.5", "OWASP FSTM - Stage 7", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.13", "UN R155 - Annex 5 Part A 4.3.7 (28.1)"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-RUN-02", "name": "Sandbox network service and process execution observed", "severity": "HIGH", "result": "PASS", "framework_clauses": ["ETSI EN 303 645 - 5.13-1", "IEC 62443-4-2 - CR 3.5", "OWASP FSTM - Stage 7", "FDA 524B - (b)(2)", "ISO/SAE 21434 - 10.4.2", "TEC 31318 - 3.13", "UN R155 - Annex 5 Part A 4.3.7 (28.1)"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-UPD-01", "name": "Update signature verification presence", "severity": "CRITICAL", "result": "FAIL", "framework_clauses": ["NIST SP 800-193 - 4.1.2", "ETSI EN 303 645 - 5.3-9, 5.3-10", "NIST IR 8259A - Capability 5", "IEC 62443-4-2 - CR 3.4", "EU CRA - Annex I Part I 3", "EN 18031-1 - SUM-1", "EN 18031-3 - RED 3.3(f) - SUM", "IEC 81001-5-1 - 7.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 13.4", "TEC 31318 - 3.3", "UN R155 - Annex 5 Part A 4.3.3 (11)", "CWE-347"], "remediation_steps": ["Implement signature verification (RSA-2048+, ECDSA P-256+, or Ed25519) for all firmware update packages.", "Store the verification public key in immutable/read-only storage (not in the updatable partition).", "Reject and log any update package that fails signature verification."], "remediation_yocto": "Adopt `meta-secure-core` / swupdate's signed-image support; configure `SWUPDATE_SIGNING` (or RAUC's `keyring.pem`) rather than rolling a custom verifier."}, {"tc_id": "TC-UPD-02", "name": "Update channel encryption", "severity": "HIGH", "result": "PASS", "framework_clauses": ["ETSI EN 303 645 - 5.3-2, 5.3-7", "NIST IR 8259A - Capability 5", "EU CRA - Annex I Part I 3", "EN 18031-1 - SUM-1", "EN 18031-3 - RED 3.3(f) - SUM", "IEC 81001-5-1 - 7.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 13.4", "TEC 31318 - 3.3", "UN R155 - Annex 5 Part A 4.3.3 (11)", "CWE-319"], "remediation_steps": null, "remediation_yocto": null}, {"tc_id": "TC-UPD-04", "name": "Pre-installation integrity check", "severity": "CRITICAL", "result": "NOT_ASSESSED", "framework_clauses": ["NIST SP 800-193 - 4.1.2", "ETSI EN 303 645 - 5.3-9", "EU CRA - Annex I Part I 3", "EN 18031-1 - SUM-1", "EN 18031-3 - RED 3.3(f) - SUM", "IEC 81001-5-1 - 7.2", "FDA 524B - (b)(1)", "ISO/SAE 21434 - 13.4", "TEC 31318 - 3.3", "UN R155 - Annex 5 Part A 4.3.3 (11)", "CWE-494"], "remediation_steps": null, "remediation_yocto": null}], "compliance_evidence": [], "findings": [{"public_id": "a76570fe-f52e-4456-bd74-f99667fe713b", "finding_type": "CVE", "title": "CVE-2026-72842: openwrt 23.05.5", "severity": "CRITICAL", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-72842\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-72842", "cvss_score": 9.9, "epss_score": 0.00616, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-73"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "523c5564-8573-4c6d-834d-8660c2277792", "finding_type": "CVE", "title": "CVE-2026-72842: openwrt 23.05.5", "severity": "CRITICAL", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-72842\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-72842", "cvss_score": 9.9, "epss_score": 0.00616, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-73"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "banner"}, {"public_id": "46db4d81-d3a2-4b5b-b2ab-d95491965d8d", "finding_type": "CVE", "title": "CVE-2026-66747: openwrt 23.05.5", "severity": "CRITICAL", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-66747\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-66747", "cvss_score": 9.8, "epss_score": 0.00789, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-506"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "banner"}, {"public_id": "da0ef0c2-e20a-40cf-8f1c-9c38bbbec02f", "finding_type": "CVE", "title": "CVE-2026-30872: openwrt 23.05.5", "severity": "CRITICAL", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-30872\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-30872", "cvss_score": 9.8, "epss_score": 0.01095, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-121"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "9015ef2e-40e5-4a3e-b3c0-c9beeb3f0385", "finding_type": "CVE", "title": "CVE-2026-66747: openwrt 23.05.5", "severity": "CRITICAL", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-66747\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-66747", "cvss_score": 9.8, "epss_score": 0.00789, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-506"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "fdbb56fc-f6b2-4f25-940f-61e2ad852430", "finding_type": "CVE", "title": "CVE-2026-30871: openwrt 23.05.5", "severity": "CRITICAL", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-30871\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-30871", "cvss_score": 9.8, "epss_score": 0.0067, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-121"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": "banner"}, {"public_id": "ef06a6f5-fcbb-4ecf-995a-0bef7ae1c07e", "finding_type": "CVE", "title": "CVE-2026-30872: openwrt 23.05.5", "severity": "CRITICAL", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-30872\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-30872", "cvss_score": 9.8, "epss_score": 0.01095, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-121"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": "banner"}, {"public_id": "c5c5e315-66c5-417b-8939-fb492d88f51a", "finding_type": "CVE", "title": "CVE-2026-30871: openwrt 23.05.5", "severity": "CRITICAL", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-30871\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-30871", "cvss_score": 9.8, "epss_score": 0.0067, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-121"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "5e394bd2-9e0d-45a0-9cc1-f4e0dd44ff03", "finding_type": "CVE", "title": "CVE-2026-62948: openwrt 23.05.5", "severity": "CRITICAL", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-62948\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-62948", "cvss_score": 9.6, "epss_score": 0.0058, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-79", "CWE-117", "CWE-150"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": "banner"}, {"public_id": "041fa2da-1e57-4318-b247-84009aa590f6", "finding_type": "CVE", "title": "CVE-2026-62948: openwrt 23.05.5", "severity": "CRITICAL", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-62948\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-62948", "cvss_score": 9.6, "epss_score": 0.0058, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-79", "CWE-117", "CWE-150"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "a096ae66-12cd-4a87-8afc-77bc00d16415", "finding_type": "CVE", "title": "CVE-2024-54143: openwrt 23.05.5", "severity": "CRITICAL", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2024-54143\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2024-54143", "cvss_score": 9.3, "epss_score": 0.01839, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-328"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "b43f9b21-449b-4a75-8bd2-d72b632de286", "finding_type": "CVE", "title": "CVE-2024-54143: openwrt 23.05.5", "severity": "CRITICAL", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2024-54143\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2024-54143", "cvss_score": 9.3, "epss_score": 0.01839, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-328"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "banner"}, {"public_id": "d3713728-9166-4d2e-834b-0ecc7c920191", "finding_type": "UPDATE_MECHANISM", "title": "Updates install without signature verification", "severity": "CRITICAL", "remediation_text": "Ship the updater's signing keys and enable signature verification in its configuration.", "cve_id": null, "cvss_score": null, "epss_score": null, "is_kev": false, "kev_due_date": null, "cwe_ids": null, "exploit_maturity": null, "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": null}, {"public_id": "ac70fa8c-c6f6-44f8-8ac1-906fa41e80d3", "finding_type": "UPDATE_MECHANISM", "title": "Unsigned updates are accepted", "severity": "CRITICAL", "remediation_text": "Configure the updater to refuse unsigned updates (for example REQUIRE_IMAGE_SIGNATURE=1 or check_signature).", "cve_id": null, "cvss_score": null, "epss_score": null, "is_kev": false, "kev_due_date": null, "cwe_ids": null, "exploit_maturity": null, "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": null}, {"public_id": "4c3bb1e5-a88a-4ee8-b4de-c4e08dedb43b", "finding_type": "CVE", "title": "CVE-2026-69096: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-69096\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-69096", "cvss_score": 8.8, "epss_score": 0.0327, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-78"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "ebdb6dd1-4369-4941-a969-65c8cfa1bade", "finding_type": "CVE", "title": "CVE-2026-46368: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-46368\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-46368", "cvss_score": 8.8, "epss_score": 0.07834, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-77"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "02511d23-5fad-478d-b331-fe1713683913", "finding_type": "CVE", "title": "CVE-2026-59260: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-59260\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-59260", "cvss_score": 8.8, "epss_score": 0.00875, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-269"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "218ebea1-fb07-4871-a035-3fdd757206a8", "finding_type": "CVE", "title": "CVE-2026-26899: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-26899\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-26899", "cvss_score": 8.8, "epss_score": 0.00785, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-78"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "07cbcda9-3ded-42ab-89fa-78e5dee94857", "finding_type": "CVE", "title": "CVE-2026-69096: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-69096\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-69096", "cvss_score": 8.8, "epss_score": 0.0327, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-78"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "banner"}, {"public_id": "988584d8-3ccf-4837-a651-d806ab840b3c", "finding_type": "CVE", "title": "CVE-2026-55159: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-55159\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-55159", "cvss_score": 8.8, "epss_score": 0.0049, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-93"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "banner"}, {"public_id": "3d90e5c0-15ad-4cee-8d24-773a1caf25bb", "finding_type": "CVE", "title": "CVE-2026-59260: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-59260\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-59260", "cvss_score": 8.8, "epss_score": 0.00875, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-269"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "banner"}, {"public_id": "f1f824cf-34ba-4e18-b3a7-9026171fc4a6", "finding_type": "CVE", "title": "CVE-2026-55159: dnsmasq 2.90", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-55159\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-55159", "cvss_score": 8.8, "epss_score": 0.0049, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-93"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "dnsmasq"}, {"public_id": "7c373220-746e-4726-9467-9a7c8e5a50ed", "finding_type": "CVE", "title": "CVE-2026-26899: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-26899\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-26899", "cvss_score": 8.8, "epss_score": 0.00785, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-78"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "banner"}, {"public_id": "bfa98299-49f9-4fb2-8073-92c953af85f0", "finding_type": "CVE", "title": "CVE-2026-46368: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-46368\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-46368", "cvss_score": 8.8, "epss_score": 0.07834, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-77"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "banner"}, {"public_id": "272fa11e-6ce9-4037-87a2-b1c307181436", "finding_type": "CVE", "title": "CVE-2026-72840: busybox 1.36.1", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-72840\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-72840", "cvss_score": 8.8, "epss_score": 0.00442, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-266"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "busybox"}, {"public_id": "65a054c0-ba1a-4330-bc43-0e5604c3fb8d", "finding_type": "CVE", "title": "CVE-2026-72840: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-72840\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-72840", "cvss_score": 8.8, "epss_score": 0.00442, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-266"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "banner"}, {"public_id": "3d5df5d2-82ab-46ad-b934-24234535a906", "finding_type": "CVE", "title": "CVE-2026-72840: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-72840\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-72840", "cvss_score": 8.8, "epss_score": 0.00442, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-266"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "b1659625-5cdb-4f49-a515-b7024e10db8d", "finding_type": "CVE", "title": "CVE-2026-55159: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-55159\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-55159", "cvss_score": 8.8, "epss_score": 0.0049, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-93"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "e10bd695-8ccc-4941-8d27-98171460de1f", "finding_type": "CVE", "title": "CVE-2026-4892: dnsmasq 2.90", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-4892\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-4892", "cvss_score": 8.4, "epss_score": 0.00306, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-122"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "dnsmasq"}, {"public_id": "30f468e8-02e6-46fe-a2ba-ebdac5ddada0", "finding_type": "CVE", "title": "CVE-2026-29004: busybox 1.36.1", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-29004\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-29004", "cvss_score": 8.1, "epss_score": 0.0062, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-122", "CWE-131"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "busybox"}, {"public_id": "8784e25c-ce4d-457c-a56a-98acdf151649", "finding_type": "CVE", "title": "CVE-2024-51240: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2024-51240\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2024-51240", "cvss_score": 8.0, "epss_score": 0.00264, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-522"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "7e3c75c3-e2ef-4fc0-a058-5597df1b8f66", "finding_type": "CVE", "title": "CVE-2024-51240: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2024-51240\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2024-51240", "cvss_score": 8.0, "epss_score": 0.00264, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-522"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "banner"}, {"public_id": "db9aca48-f04c-4f32-ac35-579ad1d4ed02", "finding_type": "CVE", "title": "CVE-2025-62525: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2025-62525\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2025-62525", "cvss_score": 7.9, "epss_score": 0.00189, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-20", "CWE-125", "CWE-787"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "2fcc9785-9121-4cde-bbed-58ec6d3b3b08", "finding_type": "CVE", "title": "CVE-2025-62526: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2025-62526\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2025-62526", "cvss_score": 7.9, "epss_score": 0.00257, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-122"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "aa66d0be-f8da-42f2-aaea-307def02e5e3", "finding_type": "CVE", "title": "CVE-2025-62525: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2025-62525\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2025-62525", "cvss_score": 7.9, "epss_score": 0.00189, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-20", "CWE-125", "CWE-787"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": "banner"}, {"public_id": "9b7b2167-c3da-4878-8879-67dbd1632f00", "finding_type": "CVE", "title": "CVE-2025-62526: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2025-62526\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2025-62526", "cvss_score": 7.9, "epss_score": 0.00257, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-122"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": "banner"}, {"public_id": "d3ee0347-1dd2-41b3-8a9b-c36fcd0dd001", "finding_type": "CVE", "title": "CVE-2026-30874: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-30874\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-30874", "cvss_score": 7.8, "epss_score": 0.00335, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-74", "CWE-187", "CWE-269"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "3f8be7fc-b3ad-4f90-8176-f759b5fbec04", "finding_type": "CVE", "title": "CVE-2026-30874: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-30874\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-30874", "cvss_score": 7.8, "epss_score": 0.00335, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-74", "CWE-187", "CWE-269"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": "banner"}, {"public_id": "7a371104-f314-4c96-b61e-17c15bf7082a", "finding_type": "CVE", "title": "CVE-2026-69095: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-69095\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-69095", "cvss_score": 7.5, "epss_score": 0.00928, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-22"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "banner"}, {"public_id": "0d7fd35c-799b-4416-b841-ce048df27536", "finding_type": "CVE", "title": "CVE-2026-88830: busybox 1.36.1", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-88830\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-88830", "cvss_score": 7.5, "epss_score": 0.00351, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-131"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "busybox"}, {"public_id": "5fffa228-1332-4e9e-9172-b55b8d40b207", "finding_type": "CVE", "title": "CVE-2026-6507: dnsmasq 2.90", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-6507\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-6507", "cvss_score": 7.5, "epss_score": 0.00582, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-787"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "dnsmasq"}, {"public_id": "3e251bbc-98e7-47c6-a227-3581b87b9072", "finding_type": "CVE", "title": "CVE-2026-69095: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-69095\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-69095", "cvss_score": 7.5, "epss_score": 0.00928, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-22"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "f164c19c-b61c-4f27-ba35-1837c5f9dbad", "finding_type": "CVE", "title": "CVE-2026-4890: dnsmasq 2.90", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-4890\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-4890", "cvss_score": 7.5, "epss_score": 0.01068, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-835"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "dnsmasq"}, {"public_id": "e0860989-3c11-4fa9-ad42-53e702d3fb9d", "finding_type": "CVE", "title": "CVE-2026-5172: dnsmasq 2.90", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-5172\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-5172", "cvss_score": 7.3, "epss_score": 0.00687, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-125"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "dnsmasq"}, {"public_id": "4ae5a3b7-3dfb-4bc3-8ec8-6edde27b0fcd", "finding_type": "CVE", "title": "CVE-2023-30312: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2023-30312\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2023-30312", "cvss_score": 7.3, "epss_score": 0.00294, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-203"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "banner"}, {"public_id": "4b8365fa-c84e-4e50-b180-f6efd0c14f10", "finding_type": "CVE", "title": "CVE-2026-88832: busybox 1.36.1", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-88832\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-88832", "cvss_score": 7.3, "epss_score": 0.00127, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-787"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "busybox"}, {"public_id": "2e66bc81-4937-40d4-9ac7-03465acb5bb4", "finding_type": "CVE", "title": "CVE-2023-30312: openwrt 23.05.5", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2023-30312\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2023-30312", "cvss_score": 7.3, "epss_score": 0.00294, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-203"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "openwrt_release"}, {"public_id": "fed2d769-fcca-4f11-9dea-729b969cfdb9", "finding_type": "CVE", "title": "CVE-2026-26157: busybox 1.36.1", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-26157\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-26157", "cvss_score": 7.0, "epss_score": 0.0069, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-73", "CWE-73"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "busybox"}, {"public_id": "cbe14fc0-6268-45fe-856d-ea6e85b3934c", "finding_type": "CVE", "title": "CVE-2026-26158: busybox 1.36.1", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-26158\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "cve_id": "CVE-2026-26158", "cvss_score": 7.0, "epss_score": 0.00196, "is_kev": false, "kev_due_date": null, "cwe_ids": ["CWE-73", "CWE-73"], "exploit_maturity": "UNPROVEN", "reachability": "UNKNOWN", "status": "OPEN", "confidence": "MEDIUM", "reachability_source": null, "binary_name": "busybox"}, {"public_id": "5bc78750-cac3-4728-9dfa-2a6f1b076369", "finding_type": "ATTACK_SURFACE", "title": "UART debug shell on ttyS0", "severity": "HIGH", "remediation_text": "Disable UART shell in etc/inittab.\nComment out or remove the line spawning a shell on ttyS0.\nIf UART is needed for diagnostics, require authentication before shell access.\nReference: ETSI EN 303 645 Provision 5.6 - minimise exposed attack surfaces.", "cve_id": null, "cvss_score": null, "epss_score": null, "is_kev": false, "kev_due_date": null, "cwe_ids": null, "exploit_maturity": null, "reachability": "UNKNOWN", "status": "OPEN", "confidence": "HIGH", "reachability_source": null, "binary_name": null}], "top_actions": [{"title": "CVE-2026-72842: openwrt 23.05.5", "severity": "CRITICAL", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-72842\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "binary_name": "openwrt_release", "affected_binaries": ["banner", "openwrt_release"], "affected_count": 2}, {"title": "Updates install without signature verification", "severity": "CRITICAL", "remediation_text": "Ship the updater's signing keys and enable signature verification in its configuration.", "binary_name": null, "affected_binaries": [], "affected_count": 0}, {"title": "CVE-2026-55159: dnsmasq 2.90", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-55159\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "binary_name": "dnsmasq", "affected_binaries": ["dnsmasq"], "affected_count": 1}, {"title": "CVE-2026-72840: busybox 1.36.1", "severity": "HIGH", "remediation_text": "Update the affected library to a version that includes the security fix.\nCheck the CVE's NVD page for the fixed version: https://nvd.nist.gov/vuln/detail/CVE-2026-72840\nYocto: update SRC_URI in your recipe to point to the patched version.\nBuildroot: update the package version in package/[pkg]/[pkg].mk.\nConfirm the upstream advisory, component identity and build recipe. Inspect the rebuilt artifact and run vulnerability-specific checks in an isolated authorized test environment. A version string alone does not verify remediation; do not execute recovered firmware on the analyst host.", "binary_name": "busybox", "affected_binaries": ["busybox"], "affected_count": 1}, {"title": "UART debug shell on ttyS0", "severity": "HIGH", "remediation_text": "Disable UART shell in etc/inittab.\nComment out or remove the line spawning a shell on ttyS0.\nIf UART is needed for diagnostics, require authentication before shell access.\nReference: ETSI EN 303 645 Provision 5.6 - minimise exposed attack surfaces.", "binary_name": null, "affected_binaries": [], "affected_count": 0}], "binaries": [{"name": "dnsmasq", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 10.0, "analysis_degraded": false}, {"name": "busybox", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 9.91, "analysis_degraded": false}, {"name": "pppd", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 8.31, "analysis_degraded": false}, {"name": "procd", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 8.27, "analysis_degraded": false}, {"name": "libss.so.2.0", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 8.1, "analysis_degraded": false}, {"name": "ujail", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 8.1, "analysis_degraded": false}, {"name": "opkg", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 8.03, "analysis_degraded": false}, {"name": "uhttpd", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 8.03, "analysis_degraded": false}, {"name": "e2fsck", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 7.8, "analysis_degraded": false}, {"name": "netifd", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 7.8, "analysis_degraded": false}, {"name": "mke2fs", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 7.8, "analysis_degraded": false}, {"name": "kmodloader", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 7.65, "analysis_degraded": false}, {"name": "cgi-io", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 7.65, "analysis_degraded": false}, {"name": "libfstools.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 7.65, "analysis_degraded": false}, {"name": "libuci.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 7.35, "analysis_degraded": false}, {"name": "libext2fs.so.2.4", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 7.35, "analysis_degraded": false}, {"name": "libe2p.so.2.3", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 7.35, "analysis_degraded": false}, {"name": "rpcd", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 7.35, "analysis_degraded": false}, {"name": "ubusd", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.9, "analysis_degraded": false}, {"name": "utrace", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.9, "analysis_degraded": false}, {"name": "init", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.53, "analysis_degraded": false}, {"name": "pppoe.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.3, "analysis_degraded": false}, {"name": "libiwinfo.so.20230701", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.3, "analysis_degraded": false}, {"name": "libcom_err.so.0.0", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.3, "analysis_degraded": false}, {"name": "libblkid.so.1.1.0", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.3, "analysis_degraded": false}, {"name": "libnftables.so.1.1.0", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.3, "analysis_degraded": false}, {"name": "libuclient.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.3, "analysis_degraded": false}, {"name": "logread", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.0, "analysis_degraded": false}, {"name": "odhcp6c", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.0, "analysis_degraded": false}, {"name": "logd", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.0, "analysis_degraded": false}, {"name": "nft", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.0, "analysis_degraded": false}, {"name": "uci", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 6.0, "analysis_degraded": false}, {"name": "uclient-fetch", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 5.4, "analysis_degraded": false}, {"name": "usign", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 5.4, "analysis_degraded": false}, {"name": "px5g", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 5.4, "analysis_degraded": false}, {"name": "odhcpd", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 5.4, "analysis_degraded": false}, {"name": "blkid", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 5.4, "analysis_degraded": false}, {"name": "partx", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 5.4, "analysis_degraded": false}, {"name": "jsonfilter", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 5.4, "analysis_degraded": false}, {"name": "dropbear", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 5.19, "analysis_degraded": false}, {"name": "libubus.so.20230605", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 4.2, "analysis_degraded": false}, {"name": "libblobmsg_json.so.20230523", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 4.2, "analysis_degraded": false}, {"name": "luci.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 4.2, "analysis_degraded": false}, {"name": "libsmartcols.so.1.1.0", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 4.2, "analysis_degraded": false}, {"name": "rrdns.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 4.2, "analysis_degraded": false}, {"name": "libjson_script.so.20230523", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 4.2, "analysis_degraded": false}, {"name": "libvalidate.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 4.2, "analysis_degraded": false}, {"name": "file.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 4.2, "analysis_degraded": false}, {"name": "libucode.so.20230711", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 4.2, "analysis_degraded": false}, {"name": "libubox.so.20230523", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 4.2, "analysis_degraded": false}, {"name": "mkfs.f2fs", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 3.6, "analysis_degraded": false}, {"name": "mount_root", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 3.6, "analysis_degraded": false}, {"name": "jffs2reset", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 3.6, "analysis_degraded": false}, {"name": "validate_data", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 3.6, "analysis_degraded": false}, {"name": "libpreload-seccomp.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 3.6, "analysis_degraded": false}, {"name": "mtd", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 3.6, "analysis_degraded": false}, {"name": "jshn", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "getrandom", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "libmnl.so.0.2.0", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "math.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "lucihttp.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "addpart", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "delpart", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "ucode", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "fwtool", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "luci-bwc", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "libjansson.so.4.14.0", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "liblucihttp.so.0.1", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "ubus.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "udevtrigger", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "askfirst", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "libc.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "libpreload-trace.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "libgcc_s.so.1", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "libsetlbf.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "libustream-ssl.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "urngd", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": false, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "uhttpd_ubus.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "fs.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "ubus", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": false, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 2.4, "analysis_degraded": false}, {"name": "nft_ct.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "smsc.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "xgmac_mdio.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "bcm-phy-lib.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_counter.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "vmxnet3.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "rvu_af.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "realtek.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nf_tables.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_fib_ipv6.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "i2c-mux-pca954x.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nicpf.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "rtc-rx8025.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "stmmac-platform.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "slhc.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "seqiv.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_masq.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_fib_inet.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nf_nat.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "drbg.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "pcs_xpcs.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "pppoe.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "jitterentropy_rng.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "marvell10g.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_quota.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "crc-ccitt.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "dwmac-generic.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "aquantia.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_nat.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nf_flow_table_ipv6.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "ppp_generic.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_reject.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "lzo_compress.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "mdio-gpio.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "libcrc32c.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "marvell.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nf_defrag_ipv6.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nf_reject_ipv6.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nicvf.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "fec.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "hmac.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_numgen.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_reject_ipv6.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "ptp.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "fsl-enetc-ierb.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "ravb.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nf_reject_ipv4.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "hwmon.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_limit.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "fsl-dpaa2-eth.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_chain_nat.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "fsl-enetc.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "dwmac-sun8i.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "mdio-thunder.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "thunder_bgx.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "atlantic.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "dwmac-imx.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "pps_core.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nls_iso8859-1.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nf_flow_table.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "macsec.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nls_utf8.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_objref.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_reject_inet.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "rvu_nicvf.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nf_conntrack.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "lzo.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "sfp.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_fib_ipv4.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "rvu_mbox.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "mdio-cavium.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nls_cp437.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "vfat.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "mii.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "gpio-pca953x.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "phylink.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "fsl-mc-dpio.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "i2c-dev.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "fat.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "mvpp2.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nf_log_syslog.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_hash.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nf_flow_table_inet.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_flow_offload.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "pppox.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "nft_log.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "e1000e.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "sha512_generic.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "dwmac-rk.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "lzo-rle.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "lzo_decompress.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "pcs-lynx.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "i2c-mux.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "thunder_xcv.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "stmmac.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "mvneta.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "rvu_nicpf.ko", "architecture": "AARCH64", "nx_enabled": false, "pie_enabled": false, "relro": "NONE", "stack_protector": false, "fortify_source": false, "stripped": false, "rpath": "", "risk_score": 0.9, "analysis_degraded": false}, {"name": "libmbedcrypto.so.2.28.9", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.32, "analysis_degraded": false}, {"name": "libmbedtls.so.2.28.9", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.27, "analysis_degraded": false}, {"name": "uci.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.0, "analysis_degraded": false}, {"name": "libf2fs.so.10.0.0", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.0, "analysis_degraded": false}, {"name": "libuuid.so.1.3.0", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.0, "analysis_degraded": false}, {"name": "html.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.0, "analysis_degraded": false}, {"name": "core.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.0, "analysis_degraded": false}, {"name": "libmbedx509.so.2.28.9", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.0, "analysis_degraded": false}, {"name": "ucode.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.0, "analysis_degraded": false}, {"name": "upgraded", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.0, "analysis_degraded": false}, {"name": "libnl-tiny.so.1", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.0, "analysis_degraded": false}, {"name": "libnftnl.so.11.6.0", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.0, "analysis_degraded": false}, {"name": "libjson-c.so.5.2.0", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.0, "analysis_degraded": false}, {"name": "iwinfo.so", "architecture": "AARCH64", "nx_enabled": true, "pie_enabled": true, "relro": "FULL", "stack_protector": true, "fortify_source": false, "stripped": true, "rpath": "", "risk_score": 0.0, "analysis_degraded": false}], "sbom_components": [{"name": "busybox", "version": "1.36.1", "purl": "pkg:generic/busybox@1.36.1", "cve_count": 20, "critical_cve_count": 0}, {"name": "dnsmasq", "version": "2.90", "purl": "pkg:generic/dnsmasq@2.90", "cve_count": 11, "critical_cve_count": 0}, {"name": "dropbear", "version": "2022.82", "purl": "pkg:generic/dropbear@2022.82", "cve_count": 2, "critical_cve_count": 0}, {"name": "libblkid.so.1", "version": null, "purl": "pkg:generic/blkid?soname=libblkid.so.1", "cve_count": 0, "critical_cve_count": 0}, {"name": "libblobmsg_json.so.20230523", "version": null, "purl": "pkg:generic/blobmsg_json?soname=libblobmsg_json.so.20230523", "cve_count": 0, "critical_cve_count": 0}, {"name": "libcom_err.so.0", "version": null, "purl": "pkg:generic/com_err?soname=libcom_err.so.0", "cve_count": 0, "critical_cve_count": 0}, {"name": "libc.so", "version": null, "purl": "pkg:generic/c?soname=libc.so", "cve_count": 0, "critical_cve_count": 0}, {"name": "libe2p.so.2", "version": null, "purl": "pkg:generic/e2p?soname=libe2p.so.2", "cve_count": 0, "critical_cve_count": 0}, {"name": "libext2fs.so.2", "version": null, "purl": "pkg:generic/ext2fs?soname=libext2fs.so.2", "cve_count": 0, "critical_cve_count": 0}, {"name": "libf2fs.so.10", "version": null, "purl": "pkg:generic/f2fs?soname=libf2fs.so.10", "cve_count": 0, "critical_cve_count": 0}, {"name": "libfstools.so", "version": null, "purl": "pkg:generic/fstools?soname=libfstools.so", "cve_count": 0, "critical_cve_count": 0}, {"name": "libgcc_s.so.1", "version": null, "purl": "pkg:generic/gcc?soname=libgcc_s.so.1", "cve_count": 0, "critical_cve_count": 0}, {"name": "libiwinfo.so.20230701", "version": null, "purl": "pkg:generic/iwinfo?soname=libiwinfo.so.20230701", "cve_count": 0, "critical_cve_count": 0}, {"name": "libjansson.so.4", "version": null, "purl": "pkg:generic/jansson?soname=libjansson.so.4", "cve_count": 0, "critical_cve_count": 0}, {"name": "libjson-c.so.5", "version": null, "purl": "pkg:generic/json-c?soname=libjson-c.so.5", "cve_count": 0, "critical_cve_count": 0}, {"name": "libjson_script.so.20230523", "version": null, "purl": "pkg:generic/json_script?soname=libjson_script.so.20230523", "cve_count": 0, "critical_cve_count": 0}, {"name": "liblucihttp.so.0", "version": null, "purl": "pkg:generic/lucihttp?soname=liblucihttp.so.0", "cve_count": 0, "critical_cve_count": 0}, {"name": "libmbedcrypto.so.7", "version": null, "purl": "pkg:generic/mbedtls?soname=libmbedcrypto.so.7", "cve_count": 0, "critical_cve_count": 0}, {"name": "libmbedtls.so.14", "version": null, "purl": "pkg:generic/mbedtls?soname=libmbedtls.so.14", "cve_count": 0, "critical_cve_count": 0}, {"name": "libmbedx509.so.1", "version": null, "purl": "pkg:generic/mbedtls?soname=libmbedx509.so.1", "cve_count": 0, "critical_cve_count": 0}, {"name": "libmnl.so.0", "version": null, "purl": "pkg:generic/mnl?soname=libmnl.so.0", "cve_count": 0, "critical_cve_count": 0}, {"name": "libnftables.so.1", "version": null, "purl": "pkg:generic/nftables?soname=libnftables.so.1", "cve_count": 0, "critical_cve_count": 0}, {"name": "libnftnl.so.11", "version": null, "purl": "pkg:generic/nftnl?soname=libnftnl.so.11", "cve_count": 0, "critical_cve_count": 0}, {"name": "libnl-tiny.so.1", "version": null, "purl": "pkg:generic/nl-tiny?soname=libnl-tiny.so.1", "cve_count": 0, "critical_cve_count": 0}, {"name": "libsmartcols.so.1", "version": null, "purl": "pkg:generic/smartcols?soname=libsmartcols.so.1", "cve_count": 0, "critical_cve_count": 0}, {"name": "libubox.so.20230523", "version": null, "purl": "pkg:generic/ubox?soname=libubox.so.20230523", "cve_count": 0, "critical_cve_count": 0}, {"name": "libubus.so.20230605", "version": null, "purl": "pkg:generic/ubus?soname=libubus.so.20230605", "cve_count": 0, "critical_cve_count": 0}, {"name": "libuci.so", "version": null, "purl": "pkg:generic/uci?soname=libuci.so", "cve_count": 0, "critical_cve_count": 0}, {"name": "libuclient.so", "version": null, "purl": "pkg:generic/uclient?soname=libuclient.so", "cve_count": 0, "critical_cve_count": 0}, {"name": "libucode.so.20230711", "version": null, "purl": "pkg:generic/ucode?soname=libucode.so.20230711", "cve_count": 0, "critical_cve_count": 0}, {"name": "libuuid.so.1", "version": null, "purl": "pkg:generic/uuid?soname=libuuid.so.1", "cve_count": 0, "critical_cve_count": 0}, {"name": "libvalidate.so", "version": null, "purl": "pkg:generic/validate?soname=libvalidate.so", "cve_count": 0, "critical_cve_count": 0}, {"name": "openwrt", "version": "23.05.5", "purl": "pkg:generic/openwrt@23.05.5", "cve_count": 23, "critical_cve_count": 6}], "network_surface": {"has_snmp": false, "services": [{"port": 22, "version": null, "protocol": "tcp", "risk_level": "medium", "source_file": "etc/config/dropbear", "is_plaintext": false, "service_name": "ssh", "is_default_credentials": false}, {"port": 80, "version": null, "protocol": "tcp", "risk_level": "medium", "source_file": "etc/init.d/uhttpd", "is_plaintext": true, "service_name": "http", "is_default_credentials": false}], "has_telnet": false, "open_ports": [22, 80], "debug_interfaces": [], "has_web_interface": true, "plaintext_services": ["http"], "exposed_ip_addresses": ["10.1.2.3", "192.168.0.1", "192.168.0.199", "192.168.1.2", "192.168.10.1", "192.168.2.1", "192.168.2.2", "64.94.110.11"], "exposed_ip_endpoints": [{"ip": "10.1.2.3", "port": null, "protocol": null}, {"ip": "192.168.0.1", "port": null, "protocol": null}, {"ip": "192.168.0.199", "port": null, "protocol": null}, {"ip": "192.168.1.2", "port": null, "protocol": null}, {"ip": "192.168.10.1", "port": null, "protocol": null}, {"ip": "192.168.2.1", "port": null, "protocol": null}, {"ip": "192.168.2.2", "port": null, "protocol": null}, {"ip": "64.94.110.11", "port": null, "protocol": "udp"}], "exposed_ot_protocols": [], "has_default_ssh_port": true, "total_attack_surface_score": 3.0, "network_facing_debug_interfaces": []}, "reachability_proofs": [], "threat_model": {"run_id": 125, "firmware_id": 97, "framework": "HYBRID", "generated_at": "2026-10-10T06:55:55.190611+00:00", "summary": {"dynamic": {"crashes": [], "listeners": [{"title": "Runtime: listening network service (/usr/sbin/dnsmasq)", "evidence": "Observed under emulation in /usr/sbin/dnsmasq: bind, listen", "severity": "MEDIUM", "finding_id": null, "description": null}], "run_status": "complete", "crash_count": 0, "completed_at": "2026-10-10T06:55:27.192525+00:00", "behavior_count": 2, "binaries_total": 206, "listener_count": 1, "binaries_executed": 46, "threats_confirmed": ["TID-202"], "unmapped_observations": [{"title": "Runtime: shell interpreter executed (/sbin/init)", "reason": "Shell execution observation; attacker-controlled input flow is unverified. The EMB3D subset FDIE assesses has no injection threat outside the web interface (TID-319/320), and this binary was not observed serving a socket - claiming remote exploitability from an exec alone would overstate the evidence.", "evidence": "Observed under emulation in /sbin/init: execve\nPaths seen: /bin/sh", "severity": "LOW", "finding_id": null, "description": null}]}, "by_risk_level": {"LOW": 0, "HIGH": 1, "MEDIUM": 4, "CRITICAL": 3}, "threats_total": 8, "source_versions": {"runtime_id": "d9e47ccd-8534-43f3-8e55-05a1dbbccf75", "findings_at": "2026-10-10 06:55:27.192525+00:00", "source_scan": {"status": "complete", "findings": 56, "truncated": null, "files_found": 116, "completed_at": "2026-10-10T06:46:54.176998+00:00", "assessment_id": "23d691cb-de7e-4d36-a5a0-4a5a94978278", "files_scanned": 116, "engine_artifact": null, "provenance_note": "Configured sandbox artifact digest; unknown if not supplied.", "orchestrator_build": "unknown"}, "compliance_at": "2026-10-10 06:55:41.488340+00:00"}, "properties_total": 13, "properties_present": 4, "properties_not_assessed": 6}, "freshness": "current", "freshness_note": null, "properties": [{"pid": "PID-124", "category": "HARDWARE", "name": "Random Access Memory (RAM) chips", "description": "Susceptibility of onboard RAM to physical extraction, cold-boot, or bus-snooping attacks.", "status": "NOT_ASSESSED", "evidence": {"reason": "Hardware-level property - requires physical access to the device (board inspection, debug-port probing, or bus analysis) and cannot be determined from firmware image analysis alone."}, "threats": []}, {"pid": "PID-15", "category": "HARDWARE", "name": "Hardware access port (UART, JTAG)", "description": "Presence and protection of physical debug/programming interfaces such as UART or JTAG headers.", "status": "NOT_ASSESSED", "evidence": {"reason": "No boot-console/UART signal found in this firmware's bootloader or boot config."}, "threats": []}, {"pid": "PID-14", "category": "HARDWARE", "name": "External peripheral interconnects (USB, Serial)", "description": "Externally accessible peripheral buses that could be used for data exfiltration or code injection.", "status": "NOT_ASSESSED", "evidence": {"reason": "No USB gadget/ADB/serial-console signal found in this firmware."}, "threats": []}, {"pid": "PID-13", "category": "HARDWARE", "name": "Peripheral chips and integrated data buses", "description": "Discrete chips sharing physical buses (I2C/SPI) that could allow cross-component tampering.", "status": "NOT_ASSESSED", "evidence": {"reason": "No device-tree data found in this firmware to enumerate bus topology."}, "threats": []}, {"pid": "PID-21", "category": "SYSTEM_SOFTWARE", "name": "Bootloader integrity protections", "description": "Whether the bootloader enforces signature/integrity checks before handing off to the OS image.", "status": "NOT_ASSESSED", "evidence": {"reason": "Boot signature enforcement: This artifact holds no boot-chain evidence: no bootloader, kernel container or boot partition survived extraction (for example a bare root filesystem, or an upgrade image whose kernel header was consumed during unpacking).", "findings": [{"title": "Boot chain review: no boot chain in the extracted image", "severity": "INFO", "finding_id": null, "description": null}], "evidence_scope": "static firmware image evidence; device enforcement (fused or required keys, boot ROM policy) not validated"}, "threats": []}, {"pid": "PID-25", "category": "SYSTEM_SOFTWARE", "name": "Software/hardware root of trust", "description": "Whether a root-of-trust mechanism (secure/verified boot chain) anchors the device's trust model.", "status": "NOT_ASSESSED", "evidence": {"reason": "Hardware root of trust: This artifact holds no boot-chain evidence: no bootloader, kernel container or boot partition survived extraction (for example a bare root filesystem, or an upgrade image whose kernel header was consumed during unpacking).", "findings": [{"title": "Boot chain review: no boot chain in the extracted image", "severity": "INFO", "finding_id": null, "description": null}], "evidence_scope": "static firmware image evidence; device enforcement (fused or required keys, boot ROM policy) not validated"}, "threats": []}, {"pid": "PID-27", "category": "SYSTEM_SOFTWARE", "name": "Firmware/software update support", "description": "Whether the device supports field updates at all, and how the update mechanism is implemented.", "status": "PRESENT", "evidence": {"reason": "A field-update path was found in the firmware (listed below).", "findings": [{"title": "Updates install without signature verification", "severity": "CRITICAL", "finding_id": null, "description": null}, {"title": "Update sources use HTTPS", "severity": "INFO", "finding_id": null, "description": null}, {"title": "Update review: version strings", "severity": "INFO", "finding_id": null, "description": null}, {"title": "Update review: hash and flash strings", "severity": "INFO", "finding_id": null, "description": null}, {"title": "Unsigned updates are accepted", "severity": "CRITICAL", "finding_id": null, "description": null}], "update_path": ["sbin/mtd", "sbin/sysupgrade", "sbin/upgraded", "usr/bin/fwtool", "bin/opkg: opkg package manager (etc/opkg.conf)"], "evidence_scope": "static firmware evidence (handlers, scripts, strings, manifests); update behaviour on the device not validated"}, "threats": []}, {"pid": "PID-271", "category": "SYSTEM_SOFTWARE", "name": "Firmware cryptographic integrity validation", "description": "Whether firmware update images are cryptographically signed and verified before being applied.", "status": "NOT_PRESENT", "evidence": {"reason": "The update path installs updates without signature verification: integrity rests on checksums or on nothing (listed below).", "findings": [{"title": "Updates install without signature verification", "severity": "CRITICAL", "finding_id": null, "description": null}, {"title": "Update sources use HTTPS", "severity": "INFO", "finding_id": null, "description": null}, {"title": "Update review: version strings", "severity": "INFO", "finding_id": null, "description": null}, {"title": "Update review: hash and flash strings", "severity": "INFO", "finding_id": null, "description": null}, {"title": "Unsigned updates are accepted", "severity": "CRITICAL", "finding_id": null, "description": null}], "update_path": ["sbin/mtd", "sbin/sysupgrade", "sbin/upgraded", "usr/bin/fwtool", "bin/opkg: opkg package manager (etc/opkg.conf)"], "evidence_scope": "static firmware evidence (handlers, scripts, strings, manifests); update behaviour on the device not validated", "integrity_evidence": ["lib/upgrade/fwtool.sh: fwtool_check_signature returns success when usr/bin/ucert is absent, and usr/bin/ucert is not in the image", "remaining image checks are metadata and format only (fwtool_check_image: supported-devices list; platform_check_image: image format)"]}, "threats": [{"property_id": 1620, "tid": "TID-211", "title": "Device Allows Unauthenticated Firmware Installation", "description": "If update images aren't cryptographically signed and verified, an attacker (network-adjacent or with physical access) can install arbitrary firmware, achieving full and persistent device compromise.", "likelihood": 4, "impact": 5, "risk_score": 20, "risk_level": "CRITICAL", "rationale": "Update-path evidence shows images are installed without signature verification: lib/upgrade/fwtool.sh: fwtool_check_signature returns success when usr/bin/ucert is absent, and usr/bin/ucert is not in the image; remaining image checks are metadata and format only (fwtool_check_image: supported-devices list; platform_check_image: image format).", "mitigations": [{"mid": "MID-026", "level": "Foundational", "title": "Secure Firmware Update"}, {"mid": "MID-038", "level": "Foundational", "title": "Authenticate for Administrative Actions"}]}]}, {"pid": "PID-3231", "category": "APPLICATION_SOFTWARE", "name": "Native binary execution restrictions", "description": "Whether userspace binaries are hardened against memory-corruption exploitation (NX, PIE, stack protector, RELRO, FORTIFY).", "status": "NOT_PRESENT", "evidence": {"no_nx": 97, "no_pie": 128, "no_relro": 97, "no_fortify": 191, "total_binaries": 191, "dynamic_crashes": [], "no_stack_protector": 123, "unhardened_fraction": 0.51}, "threats": [{"property_id": 1621, "tid": "TID-301", "title": "Application Binaries Modified", "description": "Userspace binaries without exploit-mitigation hardening are easier to tamper with or exploit into running attacker-controlled code, undermining the integrity of the application layer.", "likelihood": 4, "impact": 4, "risk_score": 16, "risk_level": "CRITICAL", "rationale": "97 of 191 binaries lack NX/DEP protections (51%).", "mitigations": [{"mid": "MID-004", "level": "Foundational", "title": "Memory Hardening Against Code Injection"}, {"mid": "MID-026", "level": "Foundational", "title": "Secure Firmware Update"}]}, {"property_id": 1621, "tid": "TID-327", "title": "Out of Bounds Memory Access", "description": "Binaries compiled without stack protection, FORTIFY_SOURCE, or NX/DEP are significantly easier to exploit via buffer overflows and other memory-corruption bugs into arbitrary code execution.", "likelihood": 4, "impact": 4, "risk_score": 16, "risk_level": "CRITICAL", "rationale": "123 of 191 binaries lack stack-protector hardening.", "mitigations": [{"mid": "MID-004", "level": "Foundational", "title": "Memory Hardening Against Code Injection"}, {"mid": "MID-013", "level": "Foundational", "title": "Process and Thread Memory Segmentation"}, {"mid": "MID-086", "level": "Leading", "title": "Hardware Enforcement of Memory Access"}]}]}, {"pid": "PID-3321", "category": "APPLICATION_SOFTWARE", "name": "Password-authenticated services", "description": "Services and accounts protected by passwords, and whether those credentials are unique/strong or hardcoded/default.", "status": "PRESENT", "evidence": {"hardcoded_secrets": [], "default_credential_services": []}, "threats": []}, {"pid": "PID-311", "category": "APPLICATION_SOFTWARE", "name": "Web/HTTP application interface", "description": "Whether the device exposes a web-based management UI, and the presence of injection-class weaknesses in its code.", "status": "PRESENT", "evidence": {"has_web_interface": true}, "threats": [{"property_id": 1623, "tid": "TID-320", "title": "SQL Injection", "description": "Web-management interfaces that build queries from unsanitized input can let a remote attacker read or modify backend data, or in embedded contexts, device configuration and credentials.", "likelihood": 2, "impact": 4, "risk_score": 8, "risk_level": "MEDIUM", "rationale": "Web management configuration was identified. This property does not establish injection dataflow or deployed-device exposure; review the separately dated source-analysis findings.", "mitigations": [{"mid": "MID-038", "level": "Foundational", "title": "Authenticate for Administrative Actions"}]}, {"property_id": 1623, "tid": "TID-319", "title": "Cross Site Scripting (XSS)", "description": "Unsanitized input reflected in the web UI can let an attacker run script in an administrator's browser session, potentially leading to session hijacking or configuration changes.", "likelihood": 2, "impact": 3, "risk_score": 6, "risk_level": "MEDIUM", "rationale": "Web management configuration was identified. This property does not establish injection dataflow or deployed-device exposure; review the separately dated source-analysis findings.", "mitigations": [{"mid": "MID-038", "level": "Foundational", "title": "Authenticate for Administrative Actions"}]}]}, {"pid": "PID-41", "category": "NETWORKING", "name": "Exposed remote network services", "description": "Network-facing services reachable without physical access (management protocols, debug services, OT protocols).", "status": "PRESENT", "evidence": {"open_ports": [22, 80], "service_count": 2, "debug_interfaces": [], "dynamic_listeners": [{"title": "Runtime: listening network service (/usr/sbin/dnsmasq)", "evidence": "Observed under emulation in /usr/sbin/dnsmasq: bind, listen", "severity": "MEDIUM", "finding_id": null, "description": null}], "exposed_ip_endpoints": [{"ip": "10.1.2.3", "port": null, "protocol": null}, {"ip": "192.168.0.1", "port": null, "protocol": null}, {"ip": "192.168.0.199", "port": null, "protocol": null}, {"ip": "192.168.1.2", "port": null, "protocol": null}, {"ip": "192.168.10.1", "port": null, "protocol": null}, {"ip": "192.168.2.1", "port": null, "protocol": null}, {"ip": "192.168.2.2", "port": null, "protocol": null}, {"ip": "64.94.110.11", "port": null, "protocol": "udp"}], "exposed_ot_protocols": [], "total_attack_surface_score": 3.0, "network_facing_debug_interfaces": []}, "threats": [{"property_id": 1624, "tid": "TID-202", "title": "Exploitable System Network Stack Component", "description": "Network-facing services are a remote attack surface - memory-safety or logic bugs in any exposed service can be triggered without any prior access to the device.", "likelihood": 2, "impact": 4, "risk_score": 8, "risk_level": "MEDIUM", "rationale": "1 binary(s) observed binding and listening under emulation (sandbox observations, not proof of deployed-device reachability); static attack-surface score 3.0.", "mitigations": [{"mid": "MID-039", "level": "Foundational", "title": "Restrict Software Diagnostic Functions"}, {"mid": "MID-013", "level": "Foundational", "title": "Process and Thread Memory Segmentation"}]}]}, {"pid": "PID-411", "category": "NETWORKING", "name": "Services handling sensitive information", "description": "Whether network services that carry sensitive data (credentials, configuration, telemetry) protect it with encryption and strong cryptographic primitives.", "status": "NOT_PRESENT", "evidence": {"has_snmp": false, "has_telnet": false, "plaintext_services": ["http"], "weak_crypto_findings": [{"title": "MD4 usage detected - cryptographically broken", "severity": "HIGH", "finding_id": null, "description": null}, {"title": "RC4 stream cipher - cryptographically broken", "severity": "HIGH", "finding_id": null, "description": null}, {"title": "MD5 usage detected - cryptographically broken", "severity": "MEDIUM", "finding_id": null, "description": null}, {"title": "MD4 usage detected - cryptographically broken", "severity": "HIGH", "finding_id": null, "description": null}]}, "threats": [{"property_id": 1625, "tid": "TID-411", "title": "Weak/Insecure Cryptographic Protocol", "description": "Use of deprecated or weak cryptographic algorithms/protocols (e.g. RC4, DES, MD5, SSLv3) provides only an illusion of protection and can often be broken by an attacker with modest resources.", "likelihood": 4, "impact": 3, "risk_score": 12, "risk_level": "HIGH", "rationale": "4 weak-cryptography finding(s) identified.", "mitigations": [{"mid": "MID-035", "level": "Foundational", "title": "Encrypt Network Traffic"}, {"mid": "MID-034", "level": "Foundational", "title": "Authenticate Network Messages"}]}, {"property_id": 1625, "tid": "TID-408", "title": "Unencrypted Sensitive Data Communication", "description": "Sensitive data (credentials, configuration, telemetry) sent over plaintext protocols (e.g. Telnet, unencrypted HTTP, SNMPv1/v2) can be captured by anyone with network visibility.", "likelihood": 3, "impact": 3, "risk_score": 9, "risk_level": "MEDIUM", "rationale": "Plaintext service(s) detected: ['http'].", "mitigations": [{"mid": "MID-035", "level": "Foundational", "title": "Encrypt Network Traffic"}, {"mid": "MID-081", "level": "Intermediate", "title": "Secure Network Tunnels"}]}]}]}, "runtime_coverage": {"created_at": "2026-10-10T06:54:01.811638+00:00", "completed_at": "2026-10-10T06:55:27.192525+00:00", "binaries_total": 206, "binaries_supported": 46, "binaries_executed": 46, "libraries_observed": 27, "behavior_findings": 2, "completed_at_label": "2026-10-10 06:55 UTC", "run_id": "d9e47ccd-8534-43f3-8e55-05a1dbbccf75"}, "locked_sections": []}