Vulnerabilities are inevitable, so the ability to patch securely is a core security control. Unsigned updates let attackers install malicious firmware, and devices that cannot be updated remain vulnerable permanently.
Provide a secure update mechanism with signed and verified firmware delivered over encrypted channels, and keep devices patchable for their supported lifetime.
The same feature written the risky way, then with the fix applied.
How this risk has ranked in each OWASP release.
2014Latest
#09iot09-2014 Insecure Software/Firmware
