Towards Evaluating the Security Risks of Using Third-Party Components in IoT Firmware