An exploit is something that can potentially take advantage of a vulnerability. A vulnerability is a weakness that can compromise the confidentiality, integrity, or availability of a system or its data; a threat is the real possibility that someone will exploit it. section 11.1.2 section 11.6
Keep these security concepts distinct:
- Vulnerability: a potential weakness, such as an exposed house window or a weakness in DHCP. section 11.1.2
- Exploit: the method or tool used to take advantage of that weakness, such as a rock breaking the window or a program targeting a network protocol. section 11.1.2
- Threat: the attacker or real possibility of harmful exploitation. section 11.1.2
- Mitigation technique: a protective measure, such as metal bars on windows or DHCP Snooping on a network. section 11.1.2
DHCP vulnerability
Standard network protocols such as DHCP can contain vulnerabilities. An attacker can use a tool to exploit one, potentially harming network confidentiality, integrity, or availability; DHCP Snooping is identified as a mitigation. section 11.1.2
