Question

A CySA+ analyst is tasked with assessing a fleet of proprietary IoT gateway devices whose firmware is compiled from a mix of open-source libraries. The security team suspects that outdated third-party components (such as an old OpenSSL build) are embedded in the firmware images, but a standard network vulnerability scanner only reports the device as 'live host, port 443 open' with no CVE detail. Which assessment approach will most effectively identify the vulnerable embedded components?

Accepted Answer

Run a software composition analysis (SCA) tool against the extracted firmware images to enumerate embedded libraries and match them to known CVEs

Answer

Increase the network scanner's timing template to aggressive so it performs deeper port and service fingerprinting

Answer

Perform a dynamic application security testing (DAST) scan against the device's web management interface

Answer

Configure the network scanner with SNMP community strings to pull device inventory data