Intercepting firmware update traffic (often unencrypted HTTP) - MITM on the update process to capture the firmware image