Study. uk . com
  1. Home
  2. All questions
  3. Question 494

CISSP study material · question 494 of 500

Home routers and set-top boxes that accept unsigned firmware are described by OWASP as a growing target. What does it say about remediating the problem?

  1. The vendor can revoke the unsigned firmware through the certificate authority.
  2. The devices can be secured by disabling their update mechanism entirely.
  3. The affected devices can be patched remotely once a signing key is issued.
  4. Often the only route is a fix in a future version while the vulnerable versions age out of use.
Show the answer

Answer: D. Often the only route is a fix in a future version while the vulnerable versions age out of use.

With no verification of firmware signatures there is often no repair path at all; a later release fixes it while old units simply age out.

Source: OWASP Top 10 A08:2025 (OWASP) — OWASP Top 10:2025 A08 Software or Data Integrity Failures > Example attack scenarios

Challenge yourself on this topic → Study as cards