This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Top IoT Vulnerabilities
From OWASP
Revision as of 02:38, 30 November 2015 by Craig Smith (talk | contribs) (Created page with "= Top IoT Vulnerabilities = The top IoT vulnerabilities (DRAFT) are as follow: {| border="1" class="wikitable" style="text-align: left" ! Vulnerability ! Attack Surface ! Su...")
Top IoT Vulnerabilities
The top IoT vulnerabilities (DRAFT) are as follow:
Vulnerability | Attack Surface | Summary |
---|---|---|
Username Enumeration |
|
|
Weak Passwords |
|
|
Account Lockout |
|
|
Unencrypted Services |
|
|
Two-factor Authentication |
|
|
Poorly Implemented Encryption |
|
|
Update Sent Without Encryption |
|
|
Update Location Writable |
|
|
Denial of Service |
|
|
Removal of Storage Media |
|
|
No Manual Update Mechanism |
|
|
Missing Update Mechanism |
|
|
Firmware Version Display and/or Last Update Date |
|
|