Hardware Analysis
Having gathered public knowledge about the device in the OSINT chapter, the next step consisted in analysing the target’s hardware. This involved opening the device, as seen in the image below.
Although the target was composed of two PCBs, only the main PCB possessed relevant components for analysis, as can be seen in the images below. Further close up images of the components are provided in the Appendix.
The components were identified and analysed for vulnerabilities using the National Vulnerability Database (NVD) website. The results of this analysis can be seen in the table below.
| ID | Component | Description | Datasheet | Vulnerabilities |
|---|---|---|---|---|
| 1 | Sigmastar SSC333 | IP Camera SoC Processor | SSC333 datasheet | 0 |
| 2 | Sigmastar SSW101B | Wi-Fi module | SSW101B specs | 0 |
| 3 | XMC 25QH64CHIQ | Serial flash memory | 25QH64CHIQ datasheet | 0 |
| 4 | TCS7191CB | Audio amplifier | TCS7191CB datasheet | 0 |
| 5 | UTC2803M | Transistor array | UTC2803M specs | 0 |
Although three CVEs were found to be associated to the device in the previous OSINT section, these were related to its firmware rather than the underlying hardware components. Regarding the identified components, no hardware-level vulnerabilities were found.