CriticalNetwork & InfrastructureA06:2021 – Vulnerable and Outdated Components
Attackers exploit vulnerabilities in internet-facing VPN gateways, firewalls, or remote access appliances, often within days of disclosure, to gain a foothold that bypasses most endpoint controls.
Immediate Response
1Apply the vendor's fix or mitigation, or disconnect the device if none exists.
2Run the vendor's integrity checker and collect forensic images before rebuilding.
3Reset credentials, certificates, and secrets stored on the device.
4Hunt for lateral movement from the appliance into the internal network.
