# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Cherry Blossom

# TestProcedures

- 1
- 2
…
- 39
- 40
- 41
- 42
- 43
…
- 70
- 71

UNCLASSIFIED
Cherry Bomb Program Cherry Blossom Internal Test Procedures
4.2.39 Upgrade Alert Test
Description: Tests that the Flytrap properly sends an Upgrade Alert.
Setup: Flytrap must have a firmware that supports inhibit. Note that this test can
be verified in conjunction with test 4.2.21 (Firmware Upgrade Inhibit).
Run: from the Client Computer, browse to the Flytrap’s firmware upgrade page.
Verify on CW (View->Upgrade Alerts) a “Page Visit” Upgrade Alert occurs with
correct info. Upgrade the firmware (use inhibit upgrade page). Verify on CW
(View->Upgrade Alerts) an “Upgrade Attempted” Upgrade Alert occurs with
correct info.
Pass/Fail: the test passes if CW shows the corresponding Upgrade Alerts
(“Page Visit” and “Upgrade Attempted”) with correct info.
4.3 S/E 3xxx Specific Tests
This section describes tests specific to the S/E 3xxx Flytrap device. Because the
device uses a custom built non-S/E kernel (S/E have not released their GPL sources
-- the GPL sources for a similar device kernel are used instead), additional testing is
required to ensure that the device still functions in the same way as with the original
firmware. This includes testing all wireless security modes, LAN/DHCP settings, and
operational modes (AP, Client Bridge, Bridge Router, and WDS modes). The
following is a summary of the additional test procedures for the S/E 3xxx, along with
documentation on the operational modes (original manufacturer documentation is
scant or non-existent in many cases).
4.3.1 S/E 3xxx Operational Modes Test
Description: Tests that the operational modes of the device behave as in the
original manufacturer’s firmware.
Context: The device has the following modes of operation (Management ->
Operation Mode):
• AP – the device functions as an access point (not a router). The WLAN
LED is lit in AP mode.
• AP w/ WDS - additionally, the device has WDS capability when its
Operational Mode is AP – WDS is configured in the Wireless -> WDS
Settings link. Note that each AP in the WDS needs to be configured with
the WLAN MAC addresses of the other WDS devices.
• Bridge – the device can connect as a wireless client to another AP with
the same subnet. Hence, a wireless bridge is formed between the AP and
the LAN connected to the device's Ethernet port. The Wireless -> Site
UNCLASSIFIED
41

- 1
- 2
…
- 39
- 40
- 41
- 42
- 43
…
- 70
- 71