> For the complete documentation index, see [llms.txt](https://moharat.gitbook.io/cylabs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://moharat.gitbook.io/cylabs/cyber-security-assessment/exploitation/attack-surface-and-target-prioritization/default-configuration.md).

# Default Configuration

#### Default Configurations and Security Risks

**Default configurations** refer to the pre-set settings provided by software or hardware manufacturers to ensure the product works out of the box. While convenient, these default settings can pose significant security risks, including:

1. **Default Passwords**: Many devices come with default passwords, which are often widely known and can be easily exploited if not changed.
2. **Open Ports**: Default configurations might leave unnecessary network ports open, increasing the attack surface.
3. **Disabled Security Features**: Some security features may be turned off by default, leaving systems vulnerable.

#### Security Risks:

* **Unauthorized Access**: Default passwords and open ports can be exploited by attackers to gain unauthorized access.
* **Data Breaches**: Weak default settings can lead to data breaches, exposing sensitive information.
* **Network Compromise**: Misconfigured network settings can allow attackers to move laterally within a network, compromising multiple systems.

#### Mitigation Strategies:

* **Change Default Passwords**: Immediately change all default passwords to strong, unique passwords.
* **Review and Harden Configurations**: Disable unnecessary services and ports, and enable security features.
* **Regular Audits**: Conduct regular security audits to ensure configurations remain secure.

#### References:

* [CISA - Best Practices for Default Configurations](https://www.cisa.gov/news-events/news/best-practices-securing-default-configurations)
* [NIST - Security Configuration Management](https://csrc.nist.gov/publications/detail/sp/800-128/final)
* [Microsoft - Security Configuration Management](https://learn.microsoft.com/en-us/security-updates/SecurityConfigurationManagement)
* <https://www.criticalstart.com/default-configurations-a-common-gateway-for-threat-actors/#:~:text=in%20the%20platform.-,Default%20Configuration%20Risks,breaches%20to%20full%20system%20compromise.>
*