ID: INFO-08

Title: Known CVEs associated with firmware software components

Severity: Informational

CVSS Score: -

CVSS Vector String: -

Description: Automated analysis revealed several publicly disclosed CVEs associated to software components within the firmware. These include vulnerabilities associated with the identified kernel version and third party libraries. Individual CVEs have not been manually verified for applicability or exploitability against this specific firmware version and hardware revision.

Remediation: Update software components to versions without known vulnerabilities where possible. Conduct manual triage of identified CVEs to determine applicability to this specific device.

More information: See Automated Firmware Analysis chapter.