Infrastructure & Environment

IoT (Internet of Things) device

A network-connected embedded device (thermostat, camera, doorbell, appliance, etc.) that runs its own firmware, typically with no direct user access to the underlying operating system, making it a potential unmonitored security risk

Firmware

The embedded operating system running inside hardware devices such as IoT devices, routers, or other embedded systems, typically only updatable by the manufacturer

EOL (End of Life)

A manufacturer's notice that a product will no longer be sold going forward; security patches and updates are typically still available during this period

EOSL (End of Service Life)

The point at which a manufacturer fully stops providing security patches and support for a device, leaving it permanently unpatched against newly discovered vulnerabilities

Legacy device

Older equipment or software still in use, often running outdated operating systems or middleware, that may have reached EOL or EOSL and requires compensating controls if it cannot be replaced

VM escape

A vulnerability that allows an attacker to break out of an isolated virtual machine and gain access to other virtual machines running on the same hypervisor

Resource reuse

A virtualization vulnerability where a flaw in hypervisor memory management allows data written by one VM to be read by a different VM, due to improper isolation of shared physical resources

Hypervisor

The software layer that manages and allocates physical hardware resources (CPU, memory, storage) among multiple virtual machines, responsible for maintaining isolation between them

Directory traversal

A web server misconfiguration vulnerability that allows an attacker to navigate outside the intended folder structure into unauthorized directories

Out-of-bounds write

A vulnerability where data is written into a section of memory that the user or process is not authorized to access, which can lead to remote code execution or a system crash

Supply chain attack (service provider)

An attack that compromises an organization indirectly by first compromising a trusted third-party vendor or service provider that has access to the target's systems

Supply chain attack (hardware)

An attack where malicious functionality is embedded into hardware (such as counterfeit or tampered devices) before it ever reaches the end customer

Counterfeit hardware

Fake or unauthorized replica hardware, often sold to appear as legitimate branded equipment, which may contain security flaws, malicious functionality, or reliability issues

Target/HVAC supply chain breach (2013)

A real-world case where attackers compromised Target's HVAC contractor via email malware, then pivoted into Target's network because the HVAC and point-of-sale networks were not properly segmented, resulting in 40+ million stolen credit card numbers

SolarWinds Orion attack (2020)

A real-world supply chain attack where attackers compromised SolarWinds' development environment and inserted malicious code into a digitally signed Orion software update, affecting roughly 18,000 customers including Fortune 500 companies and US federal agencies, undetected for months

Scenario: An attacker gains access to a company's cash register network after first compromising a small HVAC contractor with remote access to that network. What type of vulnerability does this illustrate?

Supply chain attack (service provider), enabled by poor network segmentation

Scenario: Security researchers exploit a bug in a browser sandbox, then a kernel vulnerability, then a hypervisor bug to gain access to a different virtual machine on the same physical host. What is this called?

VM escape

Scenario: A company continues using a device that the manufacturer has stated will no longer receive any security patches, ever. What lifecycle stage has this device reached?

EOSL (End of Service Life)

Scenario: An organization installs new switches purchased from an unfamiliar reseller at a steep discount, and the devices later begin malfunctioning and overheating. What risk does this best illustrate?

Supply chain attack (hardware) / counterfeit hardware