1.4 Security Vulnerabilities

What is a vulnerability?

A vulnerability is a weakness in a system, network, or process that can be exploited by a threat actor to gain unauthorized access or cause harm. Vulnerabilities can exist in hardware, software, configurations, or even human behavior. Identifying vulnerabilities early through audits and testing is key to reducing risk before attackers find them.

Common vulnerability types

Software vulnerabilities (e.g., unpatched bugs, buffer overflows) let attackers execute unintended code. Configuration vulnerabilities arise from weak settings like default passwords or open ports. Human vulnerabilities include susceptibility to social engineering. Physical vulnerabilities involve unsecured hardware access. Each type requires different mitigation strategies, from patching to training to physical locks.

Vulnerability vs. exploit vs. risk

A vulnerability is the weakness itself; an exploit is the tool or technique used to take advantage of it; risk is the potential for loss when a threat exploits a vulnerability. Understanding this chain helps prioritize fixes: patch the highest-risk vulnerabilities first, especially those with known, actively used exploits.

Key terms

Vulnerability

A weakness in a system, network, or process that can be exploited to cause harm.

Exploit

A tool or technique used to take advantage of a vulnerability.

Risk

The potential for loss or damage when a threat exploits a vulnerability.

Configuration vulnerability

A weakness caused by improper settings, such as default passwords or open ports.

Human vulnerability

A weakness rooted in human behavior, such as susceptibility to social engineering or phishing.

Try an AP-style question

What is a zero-day vulnerability?

1. A flaw fixed on the first day
2. A virus that deletes itself
3. A flaw the vendor hasn't patched yet
4. A password with no numbers