0

I am trying to find vulnerable & small CPS(cyber physical system) devices. I need these because I want to do model checking, threat modelling and other stuffs on them. I've tried to search on https://cve.mitre.org/ , but all I am finding is very big devices like MRI machine etc. And they cost a lot too.

Is there any way I can find smaller devices like heart rate monitor, solar panels etc. which has vulnerabilities and found recently?

If anyone can just show me the way, I'll be grateful.

Shaikh Islam
  • 1
  • 1
  • Example: many domestic routers have vulnerabilities of some kind, which may be unpatchable because they are EOL. You need to be more specific about your goals and the kind of vulnerability you want to explore. Plenty of vulnerabilities are not in Mitre but reported through other channels and are public knowledge. – Kate Feb 02 '22 at 20:45
  • When I google "vulnerable iot devices" I get list upon list upon list. Have you tried this search term? – schroeder Feb 03 '22 at 10:37
  • I have listed smart coffee machine, vulnerable routers etc. But my professor (with whom I'd be working on) is telling me that those are IOT device, not CPS device. That's why I've made a post here @schroeder – Shaikh Islam Feb 03 '22 at 22:50
  • @Kate I listed a lot of vulnerable routers. But my professor told me they are more of IoT device, not CPS device. – Shaikh Islam Feb 03 '22 at 22:52
  • 1
    Then you are going to have to define what a CPS device is. What's the difference between a heart rate monitor and IOT? I suspect that you can't find what you are looking for, because you have not properly defined what you are looking for. And from your wording, it sounds like there isn't a definition except whatever your prof will accept. So, ask your prof ... – schroeder Feb 03 '22 at 23:41
  • So far, it's looking like your definition is "expensive IoT, but not *too* expensive". – schroeder Feb 03 '22 at 23:46

1 Answers1

0

Maybe you could search on bug bounty platform : hackerone, yogosha, yeswehack, ...

I found two resources quite quickly on hackerone :

I also know some projects about IoT security training platform : https://dvid.eu/

Sibwara
  • 1,316
  • 7
  • 19