Hardware Analysis
Having gathered public knowledge about the device in the OSINT chapter, the next step consisted in analysing the target’s hardware components. This involved opening the device and inspecting the Printed Circuit Board (PCB), as seen in the image below. Further close up images of the components are provided in the Appendix.
Several relevant components were identified and analysed for vulnerabilities using the National Vulnerability Database (NVD) website. The results of this analysis can be seen in the table below.
| ID | Component | Description | Datasheet | Vulnerabilities |
|---|---|---|---|---|
| 1 | QCA9558-AT4A | Wi-Fi SoC | - | 50 |
| 2 | QCA9880-BBR4A | WLAN SoC | QCA9886 datasheet (similar) | 97 |
| 3 | AR8327N-BL1A | Ethernet switch | AR8327N datasheet | 0 |
| 4 | A3R12E40CBF DDR2 SDRAM (x2) | DDR2 SRAM | A3R12E40CBF SSDRAM datasheet | 0 |
| 5 | S25FL127S | Flash memory | S2FL127S datasheet | 0 |
Since some components have known publicly disclosed vulnerabilities, this has been added as finding INFO-01.