what are the common vulnerabilities in iot firmware?