ID: INFO-03

Title: Firmware image not encrypted

Severity: Informational

CVSS Score: -

CVSS Vector String: -

Description: The firmware binary was successfully unpacked using a publicly available firmware analysis tool, without requiring any decryption. The firmware image is not encrypted or obfuscated, meaning static analysis of its contents is straightforward for anyone who obtains the binary. Individual partitions including the kernel and root filesystem were unpacked and analysed without restrictiony.

Remediation: Consider encrypting the firmware image to increase the difficulty of static analysis and reverse engineering.

More information: See Automated Firmware Analysis and Manual Firmware Analysis chapters.