A benchmark of 1,128 CVEs shows 12 vulnerability-version identification tools all fall below 45% accuracy, and even the best ensembles stay under 60%.
One bad apple spoils the barrel: Understanding the security risks introduced by third-party components in iot firmware,
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
other 1
citation-polarity summary
fields
cs.SE 1years
2025 1verdicts
CONDITIONAL 1roles
other 1polarities
unclear 1representative citing papers
citing papers explorer
-
Vulnerability-Affected Versions Identification: How Far Are We?
A benchmark of 1,128 CVEs shows 12 vulnerability-version identification tools all fall below 45% accuracy, and even the best ensembles stay under 60%.