Sample report
The real deliverable for a public firmware image: OpenWrt 21.02.0 for the TP-Link Archer C7 v2, downloaded from downloads.openwrt.org. It is not customer firmware, and the sign-off in it is a demonstration.
Summary
- Image
- openwrt-21.02.0-ath79-generic-tplink_archer-c7-v2-squashfs-sysupgrade.bin
- SHA-256
- 2665c3d169c276f08ecd1ea7d38f3d9bf9f32b7ecf424af89377f44889a26983
- Components in the SBOM
- 123
| Verdict | Findings |
|---|---|
| Affected | 610 |
| Fixed by a backported patch | 1 |
| Not affected, with evidence | 4,903 |
| Under investigation (deferred in the demo sign-off) | 2,260 |
| Not triaged | 1 |
- 16 findings are in CISA's catalogue of known exploited vulnerabilities; the report lists them first.
- 5,413 of 7,673 kernel findings were decided by rules with evidence, using a kernel configuration for this build.
- 114 components could not be matched to vulnerability data. The report names them instead of leaving them out.
The same report for your firmware
€390 per image, delivered within 10 working days of your upload.
Net price, for businesses. No VAT added: EU customers account for VAT by reverse charge.
Coming soon: we are not taking orders yet.
Read the questionsFor businesses only