Question

A network engineer uses an AI coding assistant to generate a Python script that configures SNMPv2 community strings on 200 routers. During a security review, a colleague notes that the AI hardcoded the community string 'public' in the script, that this default string is well known to attackers, and that a script kiddie could use a public SNMP walk tool against the routers once deployed. Using standard security terminology, how should the 'public' community string itself be classified in this AI-generated solution?

Accepted Answer

A vulnerability — a weakness in the configuration that could be leveraged to gain unauthorized access

Answer

A threat — the potential source of harm that may act against the routers

Answer

An exploit — the tool or technique that takes advantage of the weakness

Answer

A mitigation — a control that reduces the likelihood of successful attack