state vulnerability