The following is an attack vector due to a code vulnerability that is present:
1) buffer overflow
2) default credentials
3) physical access attack
4) phishing scam