A surplus component is hardware reused after its original intended service or application. It may be unused stock, retired equipment, or a part repurposed for a different system. Reuse can reduce cost and make otherwise scarce hardware available, but the component’s age, operating history, specifications, and maintenance condition may be uncertain.
In cybersecurity, surplus hardware can enter servers, network devices, or industrial systems. If it has outdated firmware, unsupported software, insecure default settings, or undocumented configuration, it can create vulnerabilities or complicate maintenance. Defenders should verify provenance and condition, inspect and update firmware where possible, reset configurations securely, and confirm the part is compatible with the system’s security requirements before deployment.