Wiki › Vulnerabilities & Weaknesses › Configuration Weaknesses › Disabled Security Controls

Disabled Security Controls

1 min read

Jump to:

Overview

Disabled security controls refer to protective mechanisms within information systems that have been intentionally or unintentionally turned off or rendered inactive. This vulnerability arises when essential security features such as firewalls, antivirus software, or access controls are not operational, leaving systems exposed to threats.

Why It Matters

Security impact: Disabling security controls removes critical defenses, increasing the likelihood of unauthorized access, data breaches, and malware infections.
Business risk: It can lead to operational disruptions, financial losses, regulatory non-compliance, and damage to organizational reputation.
Common consequences: Exploitation often results in data theft, system compromise, service outages, and propagation of malicious activities.

Where It Appears

Environments: Enterprise networks, cloud infrastructures, endpoint devices, and industrial control systems.
Systems or processes: Security software, intrusion detection systems, encryption mechanisms, and authentication protocols.
Typical conditions: During system misconfigurations, maintenance activities, insider actions, or as a result of malware disabling controls.

How It Is Exploited (High Level)

Attackers identify and exploit disabled security controls to bypass protections, gain unauthorized access, and execute malicious activities without detection or prevention. This creates opportunities for persistent threats and lateral movement within networks.

How It Is Addressed (High Level)