# Cybersecurity Model Based on Hardening for Secure Internet of Things Implementation
## 5 Case Study
### Step 5. Vulnerability Management  
A vulnerability scan was performed with the Nessus tool. The vulnerabilities found in the embedded systems are vulnerabilities due to lack of patches and unstable versions; see Table 17.  
To discover different weaknesses of the embedded systems, various attacks were carried out such as denial of services (DoS), Internet Control Message Protocol version 6 (ICMPv6) flooding, dictionary attack, and man in the middle (MITM); see Table 18.  
Formula (3) is used to calculate the average number of vulnerabilities based on the CVSSv3 system, resulting in 7.5. This indicates that most of the vulnerabilities are in the high category.  
\begin{table}
\begin{tabular}{c c c c} \hline \hline
**Layer** & **Equation** & **Value Replacement** & **Result** \\ \hline Perception layer & \(\frac{(\sum_{i=1}^{n}risk_{\text{avg}}\,*)}{n}\) & \(\frac{(9+9+9+9+1)}{4}\) & 7 \\ \hline Network layer & \(\frac{(\sum_{i=5}^{n}risk_{\text{avg}}\,*)}{n}\) & \(\frac{(7+9+7+8)}{4}\) & 7.8 \\ \hline Application layer & \(\frac{(\sum_{i=6}^{n}risk_{\text{avg}}\,*)}{n}\) & \(\frac{(9+9+1+1+9+9+9+9+9)}{9}\) & 7.2 \\ \hline \hline \end{tabular}
\end{table}
Table 16: Attack surface.  
\begin{table}
\begin{tabular}{c c c c c c} \hline \hline
**IP** & **CVE** & **CVSSv3** & **Risk** & **Port Protocol** & **Vulnerability** \\ \hline \multirow{8}{*}{192.168.0.17} & CVE-2019-6798 & 9.8 & Critical & 80 TCP & phpMyAdmin 4.\(\times\) \(<\) 4.8.5 \\  & CVE-2019-6798 & 9.8 & Critical & 80 TCP & phpMyAdmin prior to 4.8.5 \\  & CVE-2019-11768 & 9.8 & Critical & 80 TCP & phpMyAdmin prior to 4.8.6 \\  & CVE-2019-9517 & 9.1 & Critical & 80 TCP & Apache 2.4.\(\times\) \(<\) 2.4.41 \\  & CVE-2020-5504 & 8.8 & High & 80 TCP & phpMyAdmin 4.\(\times\) \(<\) 4.9.4/5.\(\times\) \(<\) 5.0.1 \\  & CVE-2019-0220 & 7.8 & High & 80 TCP & Apache 2.4.\(\times\) \(<\) 2.4.39 \\  & CVE-2019-12616 & 6.5 & Medium & 80 TCP & phpMyAdmin 4.\(\times\) \(<\) 4.9.0 \\  & CVE-2020-1927 & 6.1 & Medium & 80 TCP & Apache 2.4.\(\times\) \(<\) 2.4.42 \\  & CVE-2020-1934 & 6.1 & Medium & 80 TCP & Apache 2.4.\(\times\) \(<\) 2.4.42 \\ \hline \hline \end{tabular}
\end{table}
Table 17: Vulnerabilities founded on test scenario using Raspberry 3B+.  
\begin{table}
\begin{tabular}{c c c c c c} \hline \hline
**IP** & **CVSSv3** & **Risk** & **Port Protocol** & **Attack Application** & **Result** \\ \hline \multirow{8}{*}{192.168.0.17} & 7.5 & High & 80 TCP & DoS Slow HTTP Test & Effective \\  & 0 & Null & 80 TCP & DoS Hping 3 & Ineffective \\  & 7.5 & High & 80 TCP & DoS Evil Foca & Effective \\  & 0 & Null & ICMPv6 & Flood THCP-IPV6 & Ineffective \\  & 9.8 & Critical & 22 TCP & Dictionary Hydra & Effective \\  & 9.8 & Critical & 5900 TCP & Dictionary Hydra & Effective \\  & 9.8 & Critical & ARP & MITM Evil Foca & Effective \\ \hline \multirow{4}{*}{192.168.0.32} & 7.5 & High & 80 TCP & DoS Slow HTTP Test & Effective \\  & 7.5 & High & 80 TCP & DoS Hping3 & Effective \\ \cline{1-1}  & 7.5 & High & 80 TCP & DoS Evil Foca & Effective \\ \hline \hline \end{tabular}
\end{table}
Table 18: Attacks in the IoT test scenario.