IEEE/ICACT20240272 Slide.08        [Big Slide]       Oral Presentation
AVA_VAN.1-3 Search in publicly available information to identify potential vulnerabilities in the TOE. We identified some relevant CVE vulnerabilities and found similar issues, such as potential vulnerabilities in the device's web interface leading to Cross-Site Scripting. AVA_VAN.1-4 To document the identified potential vulnerabilities, which are candidates for testing and applicable to the TOE within its operational environment. We found vulnerabilities that may exist in the TOE documented in the file, which are considered test candidates T.WEAK_CRYPTOGRAPHY, T.NETWORK_ACCESS, Buffer overflow attack, OS command injection, T.UNAUTHORIZED_ADMINISTRATOR_ACCESS, T.NETWORK_DISCLOSURE, T.WEAK_AUTHENTICATION_ENDPOINTS, T.UPDATE_COMPROMISE-upgrade test, T.UNTRUSTED_COMMUNICATION_CHANNELS, T.NETWORK_DOS, T.DATA_INTEGRITY and T.MALICIOUS_TRAFFIC. But I will only take few of them to introduce.

[Go to Next Slide]
Select Voice: