NP-200 system security design review
NimbusPump NP-200 Program · candidate AREV-0004 vs effective baseline DRB-0007
PRJ-2026-0042-DRV-0001Threat review
Back to source intake
np200-firmware.cdx.json
SRC-0003CycloneDX SBOM (.json)supplemental evidenceParsed
- Uploaded (passed)05 Apr
- Scanned (passed)05 Apr
- Parsed (passed)05 Apr
- Mapped (current phase)
- Accepted (pending)
- Source id
- SRC-0003
- External version
- firmware 3.2.0-rc.1
- Source system
- CI pipeline np200-fw build 1182
- Author
- Tomas Novak (R&D Manager)
- Captured
- 05 Apr 2026
- Uploaded
- Tomas Novak, 05 Apr 2026, 08:20 UTC
- WarningSBOM-W0443 components match published CVE observations; correlation recorded as taxonomy evidence only.
- WarningSBOM-W012Supplier not declared for 11 components.
- InfoSBOM-I001Supplemental source: SBOM informs component evidence; it does not define flows or boundaries.
No canonical entities yet, proposals await confirmation in the mapping studio.
None recorded.
- TV-000112Unsigned application firmware package accepted by update agentAssessed
- CVE observations attached as evidence-qualified taxonomy on TV-000112Sourcesystem
- Parse completed; 214 components, 3 CVE observations notedSourcesystem
- Uploaded from CI build 1182 (firmware 3.2.0-rc.1)SourceTomas Novak