Vulnerabilities are inevitable, so the ability to patch securely is a core security control. Unsigned updates let attackers install malicious firmware, and devices that cannot be updated remain vulnerable permanently.
Provide a secure update mechanism with signed and verified firmware delivered over encrypted channels, and keep devices patchable for their supported lifetime.
The same feature written the risky way, then with the fix applied.
How this risk has ranked in each OWASP release.
Rank by release (taller is higher)
2022Latest
#09iot09 Insecure Default Configuration
No change since 20182018
#09iot09 Insecure Default Settings
No change since 20142014
#09iot09-2014 Insecure Software/Firmware
