vulnerable device