3.4 Network Security Vulnerabilities

Common Network Vulnerabilities

Networks are exposed to weaknesses like unpatched firmware/software, open ports, default credentials, and weak encryption protocols. Attackers exploit these gaps to gain unauthorized access. Devices like routers, switches, and IoT gadgets are common targets because they're often overlooked during security updates and configuration hardening.

Rogue Access Points & Eavesdropping

A rogue access point is an unauthorized wireless device connected to a network, letting attackers bypass perimeter defenses. Eavesdropping (sniffing) captures unencrypted data traveling across a network. Both threats highlight why encryption, network monitoring, and authentication of connected devices are essential defenses.

Denial of Service & Man-in-the-Middle

Denial of Service (DoS) attacks flood a network or server with traffic to make it unavailable to legitimate users; a Distributed DoS (DDoS) uses multiple compromised systems. A man-in-the-middle (MITM) attack secretly intercepts and possibly alters communication between two parties, often exploiting weak or missing encryption.

Key terms

Rogue access point

An unauthorized wireless access point connected to a network, allowing attackers to bypass security controls.

Denial of Service (DoS)

An attack that floods a network or server with traffic, making it unavailable to legitimate users.

DDoS

Distributed Denial of Service — a DoS attack launched from multiple compromised systems simultaneously.

Man-in-the-middle (MITM) attack

An attack where the attacker secretly intercepts and possibly alters communication between two parties.

Eavesdropping (sniffing)

Capturing unencrypted data as it travels across a network to steal sensitive information.

Try an AP-style question

Why is Telnet considered insecure?

1. It only works offline
2. It blocks all remote logins
3. It sends data in plain text
4. It uses too much encryption