A. No system hardening
B. No mechanism for updating software
C. Default or hardcoded passwords
D. All of the above