Security Evaluation Framework for Military IoT Devices

<table class="fixed-width table-group" id="tab12"><tr><td><table class="table"><colgroup><col style="width:7.96em"/><col style="width:18.00em"/></colgroup><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr class="thead"><td class="align_left"><b>Name</b></td><td class="align_center"><b>Description</b></td></tr><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr><td class="align_left">CVE-2017-9628</td><td class="align_center">An Information Exposure issue</td></tr><tr><td class="align_left" colspan="2"><hr/></td></tr><tr><td class="align_left">CVE-2017-9945</td><td class="align_center">a Denial-of-Service condition could be induced by a specially crafted PROFINET DCP packet sent as a local Ethernet (Layer 2) broadcast.</td></tr><tr><td class="align_left" colspan="2"><hr/></td></tr><tr><td class="align_left">CVE-2017-3726</td><td class="align_center">a privilege escalation vulnerability</td></tr><tr><td class="align_left" colspan="2"><hr/></td></tr><tr><td class="align_left">CVE-2016-8106</td><td class="align_center">vulnerable to a denial of service in certain layer 2 network configurations.</td></tr><tr class="table-tr"><td colspan="2"><hr class="tbody-hr"/></td></tr></table></td></tr></table>

<div>Example of selected CVE on Ethernet vulnerabilities.</div>

Security and Communication Networks

tab12

Table 12

Table 12: Security Evaluation Framework for Military IoT Devices 