IoT Attack Surface Area - Administrative Interface

The goal of this page is

Attack Surface	Vulnerability	Data Type
Ecosystem Access Control	Implicit trust between components Enrollment security Decommissioning system Lost access procedures	Test
Device Memory	Cleartext usernames Cleartext passwords Third-party credentials Encryption keys	Test
Device Physical Interfaces	Firmware extraction User CLI Admin CLI Privilege escalation Reset to insecure state	Test
Device Web Interface	SQL injection Cross-site scripting Username enumeration Weak passwords Account lockout Known credentials	Test