“…7) Insecure software/firmware:Lack of secure update mechanism, update files not encrypted, update files not verified before upload, insecure update server, hardcoded credentials. 8) Poor physical security: Device easy to disassemble, access to software via USB ports, removable storage media [4].…”