top of page

EC2.19

Security groups should not allow unrestricted access to ports with high risk

Severity

Cloud Platforms

Resources

Related Standards

Automated

CRITICAL

AWS

Amazon EC2

AWS Foundational Best Practice, CDR, ISO27001, SOC2, NIST CSF, NIST.800-53.r5,

This control checks whether unrestricted incoming traffic for the security groups is accessible to the specified ports [3389; 20; 23; 110; 143; 3306; 8080; 1433; 9200; 9300; 25; 445; 135; 21; 1434; 4333; 5432; 5500; 5601; 22; 3000; 5000; 8088; 8888] that have the highest risk. This control fails if any of the rules in a security group allow ingress traffic from 0.0.0.0/0 or ::/0 for those ports.

bottom of page