Issue Details
Use of Insecure or Outdated Components
iot05 • Rank #5 in OWASP 2023
Explanation
IoT devices often ship with outdated operating systems, libraries, and third-party components containing known vulnerabilities. Long device lifecycles compound this problem as components become increasingly outdated. Vulnerable components enable exploitation through known attack vectors that have public exploits available.
Remedy
Maintain a software bill of materials (SBOM) for all device components. Monitor for vulnerabilities in dependencies and apply patches promptly. Use current, supported versions of all components. Implement component lifecycle management and end-of-life planning.
| Year | Rank | Category |
|---|---|---|
| 2018 | #5 | iot05 - Use of Insecure or Outdated Components |
| 2022 | #5 | iot05 - Insecure Ecosystem and Cloud Interfaces |