Vulnerability Types

Question 1

Zero day

Answer 1

An attack that occurs on a vulnerability after a software has been released

Question 2

Default settings

Answer 2

Default settings can be researched and hacked.

Question 3

Unsecured accounts

Answer 3

Accounts that are left unsecured become targets for attackers looking to execute attacks with elevated privileges

Question 4

Open permissions

Answer 4

Accounts or programs not having properly restricted permissions (principal of least privilege)

Question 5

Outdated protocols

Answer 5

Don’t use them if you don’t have to. WEP/ WPA

Question 6

Unsecured protocols

Answer 6

Telnet smtp, pop3, LDAP and more are not secure.

Question 7

Open ports

Answer 7

Unnecessary ports, protocols, and services running or open when not needed, increasing the attack surface

Question 8

Third party risk

Answer 8

Anything (hardware, software, cloud service providers) you depend on someone else to provide falls into this category.

Question 9

Shadow IT

Answer 9

Unauthorized software or hardware on the network or systems (end user actions)

Question 10

Improper or weak patch management