Skip to content

H3-2022-0005

Secure Socket Shell (SSH) Port Exposed to the Internet

Category SECURITY_MISCONFIGURATION
Base Score 3.0

Description

The SSH service is accessible from the internet.

Impact

Attackers can leverage access to remote management services to gain an initial foothold in a company network. Attackers often gain access through credential attacks by obtaining passwords leaked in data breaches and by password spraying weak passwords.

References