Which of the following is the MOST common vulnerability associated with IoT devices that are directly connected to the Internet?