JCC logo
OWASP Risks Atlasby Jer Catallo

Issue Details

Use of Insecure or Outdated Components

iot05 • Rank #5 in OWASP 2023

Explanation

IoT devices often ship with outdated operating systems, libraries, and third-party components containing known vulnerabilities. Long device lifecycles compound this problem as components become increasingly outdated. Vulnerable components enable exploitation through known attack vectors that have public exploits available.

Remedy

Maintain a software bill of materials (SBOM) for all device components. Monitor for vulnerabilities in dependencies and apply patches promptly. Use current, supported versions of all components. Implement component lifecycle management and end-of-life planning.

YearRankCategory
2018#5iot05 - Use of Insecure or Outdated Components
2022#5iot05 - Insecure Ecosystem and Cloud Interfaces