ID,Type_Secret,Severité,Valeur_Secret,Fichier_Principal,Ligne,Contexte,CVSS_Score,CWE,Impact,Remédiation_Phase,Status
SECRET_001,WiFi Password (AP Fallback),CRITICAL,mascarade,ui_freenove_allinone/src/storage_manager.cpp,65,Embedded JSON config for APP_WIFI.json - AP mode password,9.1,CWE-798,Anyone can connect to AP with this password,Phase_1_Immediate,NOT_FIXED
SECRET_002,WiFi SSID (Local Network),CRITICAL,Les cils,ui_freenove_allinone/src/storage_manager.cpp,65,Hardcoded local WiFi SSID paired with known password,8.8,CWE-798,Network identified and compromisable with password mascarade,Phase_1_Immediate,NOT_FIXED
SECRET_003,WiFi SSID (Test/Backup),CRITICAL,Les cils (test_ssid),ui_freenove_allinone/src/storage_manager.cpp,65,Test WiFi fallback configuration identical to local_ssid,8.8,CWE-798,Duplicate attack vector for same network,Phase_1_Immediate,NOT_FIXED
SECRET_004,WiFi AP SSID (Broadcast),HIGH,Freenove-Setup,ui_freenove_allinone/include/runtime/runtime_config_types.h,15,Access Point name publicly visible in WiFi networks,6.5,CWE-200,Device identification and targeting by attackers,Phase_2_Urgent,PARTIALLY_MITIGATED
SECRET_005,AP Password Default Empty,CRITICAL,(empty string - no password),ui_freenove_allinone/include/runtime/runtime_config_types.h,16,AP mode has NO password - open WiFi network,10.0,CWE-306,Anyone within WiFi range can connect without password,Phase_1_Immediate,NOT_FIXED
SECRET_006,Default Hostname,LOW,zacus-freenove,ui_freenove_allinone/src/runtime/runtime_config_service.cpp,11,mDNS hostname for device discovery,3.7,CWE-200,Device fingerprinting and identification on network,Phase_3_Important,ACCEPTABLE
SECRET_007,API Bearer Token Storage,MEDIUM,Generated at runtime (g_web_auth_token[65]),ui_freenove_allinone/src/app/main.cpp,206,Bearer token stored in RAM and NVS unencrypted,5.4,CWE-320,Tokens vulnerable to RAM dumps or NVS extraction,Phase_2_Urgent,PARTIALLY_IMPLEMENTED

# Additional Secret Locations Detection
SECRET_001_ALT_1,WiFi Password (AP Fallback),CRITICAL,mascarade,ui_freenove_allinone/src/storage/storage_manager.cpp,73,Alternative embedded config location (old implementation),9.1,CWE-798,Duplicate hardcoded value,Phase_1_Immediate,NOT_FIXED
SECRET_001_ALT_2,WiFi Password (AP Fallback),CRITICAL,mascarade,REMEDIATION_GUIDE.md,13,Documentation exposing the vulnerability,9.1,CWE-798,Example code showing the flaw,Phase_1_Immediate,DOCUMENTED

# File Scan Summary
File,Extension,Total_Lines,Secrets_Found,Severity_Distribution,Recommendation
ui_freenove_allinone/src/storage_manager.cpp,cpp,803,7,4xCRITICAL+1xHIGH+2xOTHER,REMOVE_ALL_HARDCODED_CONFIGS
ui_freenove_allinone/src/storage/storage_manager.cpp,cpp,1192,1,1xHIGH,SAME_FIX_AS_ABOVE
ui_freenove_allinone/include/runtime/runtime_config_types.h,h,77,2,1xCRITICAL+1xLOW,IMPLEMENT_RUNTIME_GENERATION
ui_freenove_allinone/src/runtime/runtime_config_service.cpp,cpp,473,2,2xHIGH,ADD_CREDENTIAL_GENERATION
ui_freenove_allinone/include/system/network/network_manager.h,h,151,1,1xHIGH,UPDATE_DEFAULTS
ui_freenove_allinone/src/app/main.cpp,cpp,7500+,1,1xMEDIUM,ENCRYPT_TOKEN_STORAGE

# Exposure Vector Analysis
Attack_Vector,Difficulty,Tools_Needed,Exploitation_Time,Impact_Level,Prevention
Open_AP_No_Password,TRIVIAL,WiFi_Scanner+App,<5_min,CRITICAL,Use_Strong_Random_Password
SSID_Recon,EASY,MAC_Address+Scanner,<10_min,CRITICAL,Generate_Unique_SSID
Known_Password_List,EASY,Dictionary,<1_sec,CRITICAL,Use_Entropy-Based_Password
Firmware_Decompile,MEDIUM,Binary_Analysis_Tools,30_min,CRITICAL,Remove_All_Hardcoded_Values
RAM_Dump,HARD,UART_Access+Debugger,10_min,MEDIUM,Implement_Memory_Encryption
NVS_Extraction,HARD,Flash_Reader+Decryption,30_min,MEDIUM,Enable_NVS_Encryption

# Remediation Priority Matrix
Phase,Priority,Tasks,Effort_Hours,Deadline,Owner
Phase_1_Immediate,P0,Remove_all_hardcoded_WiFi_credentials,4,<1_day,Security_Team
Phase_1_Immediate,P0,Generate_random_AP_password_at_boot,3,<1_day,Security_Team
Phase_1_Immediate,P0,Implement_provisioning_mode,6,<1_day,Security_Team
Phase_2_Urgent,P1,Make_SSID_unique_per_device,2,<3_days,Firmware_Team
Phase_2_Urgent,P1,Implement_NVS_encryption,4,<3_days,Firmware_Team
Phase_2_Urgent,P1,Add_HMAC_auth_to_API,8,<3_days,Backend_Team
Phase_3_Important,P2,Generate_unique_hostname,1,<1_week,Firmware_Team
Phase_3_Important,P2,Token_encryption_in_NVS,3,<1_week,Security_Team
Phase_3_Important,P3,Test_and_validation,6,<2_weeks,QA_Team

# Verification Checklist Post-Remediation
Task,File_Path,Line_Numbers,Verification_Method,Target_Status
Verify_No_mascarade,src/storage*.cpp,65;73,grep_-r_mascarade,NOT_FOUND
Verify_No_Les_cils,src/storage*.cpp,65;73,grep_-r_Les_cils,NOT_FOUND
Verify_No_default_password,include/runtime_config_types.h,16,Inspect_initialization,EMPTY_OR_GENERATED
Verify_Unique_SSID,src/runtime_config_service.cpp,76,Code_review,Uses_MAC_address
Verify_Random_Password,src/app/main.cpp,3845+,Code_review,Uses_entropy_source
Verify_NVS_Encryption,include/nvs.h,*,Check_build_flags,ENCRYPTION_ENABLED
Verify_Token_Encrypted,src/app/main.cpp,3855,Code_review,Uses_encryption_API

# Risk Timeline If Not Fixed
Days_Since_Issue,Deployed_Devices,Potential_Breach_Count,Estimated_Compromise_Cost,Likelihood
1,10,2,$5K,15%
7,50,10,$25K,35%
30,200,40,$100K+,65%
90,500,100,$250K+,85%
180,1000,200,$500K+,95%

# Security Baseline Metrics
Metric,Current_Status,Target_Status,Timeline
Hardcoded_Passwords,7_located,0_found,Immediate
API_Authentication,Absent,Bearer_Token,P1
NVS_Encryption,Disabled,Enabled,P2
Password_Entropy,Low_2/10,Strong_9/10,P1
Device_Uniqueness,Hardcoded,MAC_based,P2
Token_Lifecycle,No_rotation,Expiration+Rotation,P3
