Question

Difficulty: EasyKey Security Concepts, Threats, Vulnerabilities, and Mitigations

An enterprise network administrator discovers a weakness in a router's firmware that has not yet been patched by the vendor. This weakness could potentially allow unauthorized access if targeted by malicious traffic. Which security term specifically describes this software weakness?

  1. VulnerabilityAnswer
  2. B
    Threat
  3. C
    Exploit
  4. D
    Risk

Answer

Vulnerability best describes an unpatched software weakness or flaw in system firmware.
The term vulnerability specifically refers to any weakness, flaw, or bug in system design, implementation, or firmware that leaves it open to attack.

Step-by-Step Solution

1
Analyze the item description
The scenario describes a software flaw/weakness present in router firmware.
Security terminology distinguishes between the flaw itself, the potential attacker, the mechanism of attack, and the overall business impact.
2
Map to fundamental security definitions
A weakness or flaw in system software/hardware is defined as a Vulnerability.
Threats act upon vulnerabilities using exploits, resulting in risk to the organization.

Key Concept

Key Security Definitions: Vulnerability vs. Threat vs. Exploit vs. Risk
Rate this question