A large-scale empirical analysis of the vulnerabilities introduced by third-party components in IoT firmware