getting firmware vulnerability info into hardware reviews