~/Cedric

Medium and supports with technical characteristics specific to their locality (e.g. different ADSL configuration parameters between France and the United Kingdom) Vulnerabilities

Software retrieval from a non-authenticated source Vulnerabilities

No systematic qualification procedure before installation or updating Vulnerabilities

Are tests carried out before each update? Have update periods been defined?

No management of profile privileges (administrators, users, guest, etc.) Vulnerabilities

Are the administrator accounts shared by several people? Are administrators always connected to their Admin account? Is the generic Admin account deactivated?

Breach of information system maintainability Threats

Lack of expertise in the system making retrofitting and upgrading impossible

7f9eb4b7-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Operating system. Threat: Software malfunction. Vulnerability: No report for maintenance operations

7f9eb0bf-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Operating system. Threat: Illegal processing of data. Vulnerability: Possibility of installing a backdoor or Trojan horse in the operating system

7f9eb98a-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Operating system. Threat: Eavesdropping. Vulnerability: No access monitoring device when equipment is inactive

7f9eb1a0-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Operating system. Threat: Breach of information system maintainability. Vulnerability: Obsolete software

7f9eb566-4f02-11e9-b3ea-0800277f0571 Risks

Asset: Operating system. Threat: Breach of information system maintainability. Vulnerability: No maintenance procedure