D06
Device Basic Information
Device Type: Smart Light Bulb Communication Protocol: Wi‑Fi Firmware Version: V1.5.3 Deployment Location: Corridor Function: Remote lighting control
Assessment Methods
Packet capture, firmware analysis, configuration audit
OWASP IoT Top10 Assessment
- I1 Weak, Guessable, or Hardcoded Passwords
Vulnerability: Same default password for mass production. Risk Level: High Remediation: Unique default credential for each bulb.
- I2 Insecure Network Services
Vulnerability: Local control protocol without authentication. Risk Level: Medium Remediation: Add authentication for local control packet.
- I3 Insecure Ecosystem Interfaces
Vulnerability: Cloud control API can be replayed. Risk Level: Medium Remediation: Add timestamp and nonce to prevent replay attack.
- I4 Lack of Secure Update Mechanism
Vulnerability: No firmware update function. Risk Level: High Remediation: Implement lightweight OTA update.
- I5 Use of Vulnerable and Outdated Components
Vulnerability: Small embedded system uses old components. Risk Level: Low Remediation: Maintain component security patch.
- I6 Insufficient Privacy Protection
Vulnerability: Light status data uploaded to cloud. Risk Level: Low Remediation: Give user option to disable cloud upload.
- I7 Insecure Data Transfer and Storage
Vulnerability: Light switch command transmitted in plaintext. Risk Level: Medium Remediation: Encrypt control messages.
- I8 Lack of Device Management & Audit
Vulnerability: No operation log. Risk Level: Low Remediation: Simplified log for important events.
- I9 Insecure Default Configurations
Vulnerability: WiFi configuration can be overwritten easily. Risk Level: Medium Remediation: Protect WiFi setting modification.
- I10 Poor Physical Security
Vulnerability: Easy physical replacement. Risk Level: Low Remediation: Not critical for lighting scenario.
