NIST Detect - Vulnerability Scans

DETECT – Vulnerability Scans:

Continuous Vulnerability Scans help address all the 5 NIST Cybersecurity Framework (CSF) core functions:

IDENTIFY – Vulnerability scans help identify devices, software, and configurations that are at risk of known vulnerabilities.

PROTECT – Scans help verify that unauthorized access points or vulnerabilities in authentication are addressed.

DETECT – Regular scans provide ongoing visibility into vulnerabilities and changes in the environment.
RESPOND – Use scan results to analyze and prioritize potential impacts of vulnerabilities.
RECOVER – Post-incident scans can validate the success of recovery efforts and identify areas for improvement.

Top 10 Vulnerabilities: 

  1. Unpatched Operating Systems and Software

Description: Missing patches for OS or third-party applications like Windows, Linux, or popular software (e.g., Adobe, Java).

 

  1. Outdated or Unsupported Software

Description: Use of software that is no longer supported or has reached end-of-life (EOL).

 

  1. Weak SSL/TLS Configurations

Description: Insecure SSL/TLS protocols (Secure Sockets Layer – protocols to encrypt data in transit) or weak ciphers in use.

 

  1. Default or Weak Credentials

Description: Use of default usernames and passwords (e.g., admin/admin) or weak passwords.

 

  1. Remote Code Execution (RCE) Vulnerabilities

Description: Vulnerabilities that allow attackers to execute arbitrary code on a target system

 

  1. Cross-Site Scripting (XSS) in Web Applications

Description: Unvalidated input allows attackers to inject scripts into web applications.

 

  1. Missing Security Headers in Web Applications

Description: Lack of security headers like X-Content-Type-Options, X-Frame-Options, and HSTS.

 

  1. Privilege Escalation Vulnerabilities

Description: Issues allowing attackers to gain higher privileges on a system.

 

  1. Insecure Open Ports and Services

Description: Unnecessary or insecure open ports/services (e.g., Telnet, FTP) detected.

 

  1. Insufficient Patch Management for Third-Party Libraries

Description: Vulnerabilities in third-party libraries like OpenSSL, jQuery