Threats, attacks & vulnerabilities
Vulnerabilities
Overview
A vulnerability is a weakness in a system, application, device, configuration, or process that an attacker could exploit.
Key concepts
- Patching & lifecycle: missing patch, outdated/unsupported software, zero-day
- Credentials & config: default credentials, weak password, misconfiguration
- Exposure: open port, exposed service, privilege escalation
How it works
Patching & software lifecycle
| Type | What it means |
|---|---|
| Missing patch | A security update that hasn't been installed. |
| Outdated software | No longer current, and may contain known security flaws. |
| Unsupported software | No longer receives security updates from its developer at all. |
| Zero-day vulnerability | Newly discovered, with no available patch or fix yet. |
Credentials & configuration
| Type | What it means |
|---|---|
| Default credentials | Passwords that were never changed from the factory/install default. |
| Weak password | A password that's easy to guess. |
| Misconfiguration | An insecure system setting that exposes data. |
Exposure
| Type | What it means |
|---|---|
| Open port | A network port accepting connections that may expose a service to attackers. |
| Exposed service | A service reachable from a network when it should be restricted. |
| Privilege escalation | A weakness allowing a user or attacker to gain higher permissions than intended. |