{"id":105422,"date":"2025-03-27T10:05:21","date_gmt":"2025-03-27T14:05:21","guid":{"rendered":"https:\/\/forescoutstage.wpengine.com\/?page_id=105422"},"modified":"2025-04-08T09:00:15","modified_gmt":"2025-04-08T13:00:15","slug":"the-riskiest-devices-of-2025","status":"publish","type":"page","link":"https:\/\/www.forescout.com\/research-labs\/the-riskiest-devices-of-2025\/","title":{"rendered":"The Riskiest Devices of 2025"},"content":{"rendered":"\n

The Riskiest Devices of 2025<\/h1>\n

This year, a dozen brand-new asset types have made the list. It is the single largest year-over-year change observed in the report\u2019s history. We analyzed industry, country, and device data taken directly from Forescout\u2019s Device Cloud \u2014 one of the largest global repositories of IT, OT, IoT, and IoMT data in existence.<\/p>\n

Watch the WebinarGet the Report<\/p>\n

\u00a0<\/p>\n

<\/p>\n

\n12<\/h3>\n

New riskiest asset types<\/p>\n

<\/p>\n

\n33%<\/h3>\n

YoY increase in risk for top 10 countries<\/p>\n

<\/p>\n

\n19M<\/h3>\n

Devices analyzed<\/p>\n

<\/p>\n

\n2500+<\/h3>\n

Operating system versions<\/p>\n

\n<\/figure>\n

Get a Deeper Understanding of Today\u2019s Device Risk<\/h2>\n

Keeping up with all the risk lurking in your network isn\u2019t easy. Join this webinar led by Daniel dos Santos, Head of Research, as he dives into all the device risk \u2014 including the 12 new asset types appearing on this year\u2019s list across IT, OT, IoT, and IoMT. <\/p>\n

watch the webinar<\/a><\/p>\n

Riskiest Device Categories<\/h2>\n

Device types highlighted in blue were not present in the 2023 Riskiest Devices report.<\/p>\n\n\n\n\n\n\n\n\n
<\/th>\nIT<\/strong><\/th>\nIoT<\/strong><\/th>\nOT<\/strong><\/th>\nIoMT<\/strong><\/th>\n<\/tr>\n
1<\/td>\nApplication Delivery Controller (ADC)<\/td>\nNetwork Video Recorder (NVR)<\/td>\nUniversal Gateway<\/td>\nImaging Devices<\/td>\n<\/tr>\n
2<\/td>\nIntelligent Platform Management Interface (IPMI)<\/td>\nNetwork Attached Storage (NAS)<\/td>\nHistorian<\/td>\nLab Equipment<\/td>\n<\/tr>\n
3<\/td>\nFirewall<\/td>\nVoIP Systems<\/td>\nBuilding Management System (BMS)<\/td>\nHealthcare Workstations<\/td>\n<\/tr>\n
4<\/td>\nDomain Controller<\/td>\nIP Camera<\/td>\nPhysical Access Control Systems<\/td>\nInfusion Pump Controller<\/td>\n<\/tr>\n
5<\/td>\nRouter<\/td>\nPoint of Sale (PoS) Systems<\/td>\nUninterruptible Power Supply (UPS)<\/td>\nPicture Archiving and Communication System (PACS)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

get the report<\/a><\/p>\n

Exploitable: Most Vulnerable Devices with Critical Vulnerabilities<\/h2>\n

Computers have the highest number of vulnerabilities overall but not the most dangerous ones. Routers surpass computers \u2014 accounting for half of the most critical vulnerabilities. <\/p>\n

IoMT devices \u2013 pump controllers, medication dispensing systems and workstations \u2013 have some of the most dangerous vulnerabilities \u2013 and highlight healthcare security risks.<\/p>\n

Most Vulnerable Device Categories in Total<\/h2>\n

Five of the top 10 device types also appear among the riskiest devices. Vulnerabilities are a major risk factor for connected devices. The distinction between total vulnerabilities and highly exploitable ones reinforces why network infrastructure and medical devices are prime attack targets.<\/p>\n

Open Ports by Industry<\/h2>\n

Here\u2019s a concerning trend: The use of SSH \u2013 which is encrypted \u2013 declined across all industries but the use of Telnet \u2013 which is not encrypted \u2013 increased in every industry. SMB remains the most widely used protocol across all industries. <\/p>\n

Risk by Industry<\/h2>\n

These five industries have the largest number of connected devices. The gap in risk scores between industries has narrowed \u2014 with an overall average risk score of 8.98. This marks a significant 15% increase from 2024\u2019s average of 7.73<\/p>\n

Countries with Highest Average Device Risk<\/h2>\n

We selected the 11 countries where the average device risk was 9 or higher. The average risk per country has increased significantly this year. In 2024, the average risk for the top 10 countries was 6.53. In 2025, it has risen to 9.1 \u2014 a 33% increase.<\/p>\n

The top three countries with the highest risk are Spain, China, and the UK.<\/p>\n

<\/p>\n

\n<\/figure>\n

Risk Scoring Methodology<\/h2>\n

To measure risk, we use a multifactor risk-scoring methodology calculated based on three factors: Configuration, behavior and function.<\/h5>\n