ID: INFO-07

Title: Use of weak functions in firmware binaries

Severity: Informational

CVSS Score: -

CVSS Vector String: -

Description: Automated analysis of the firmware identified the use of known weak or deprecated functions within binaries. These functions, such as strcpy, sprintf, and gets, are commonly associated with buffer overflow and memory corruption vulnerabilities. Their presence does not confirm exploitability but indicates areas warranting further manual review.

Remediation: Replace weak functions with their safer equivalents such as strncpy, snprintf, and fgets. Conduct a manual code review of affected binaries.

More information: See Automated Firmware Analysis chapter.