argus / threat-model · cardiacmonitor-v3
LIVE
Threat model
Findings · 247
Controls · 84
VEX · auto
Compliance · eSTAR
Evidence
REQUIREMENT
REQ-014
Auth · session
FIRMWARE
boot.v3
secure-boot
REPO
monitor-fw
main · #a4f12
ARGUSEYE · L2
Continuous threat model
live · v0.42
CONTROL
CTRL-21
prescribed
VEX
CSAF · auto
88 silenced
EVIDENCE
eSTAR TMP-064
audit-ready
Reachability check · 3 of 247 exploitable
RECENT FINDINGS
HIGH · REACHABLE
CVE-2026-3119
openssl · session-resumption path
CONTROL CTRL-21 PRESCRIBED
SILENCED · NOT REACHABLE
CVE-2026-2007
libxml2 · parser branch
AUTO-VEX · CSAF EMITTED
MEDIUM · DESIGN-FLAW
JTAG debug · exposed
production firmware boot.v3
REQ-014 VIOLATION
eSTAR · CYBERSECURITY
TMP-064 Threat model
✓
TMP-056 Vuln mgmt
✓
TMP-060 Controls
✓
TMP-043 Risk assessment
●
SBOM · CycloneDX
✓
ASSEMBLED · READY TO FILE