Leaving remote access accessible from the internet increases the attack surface

Severity	Exploitability	Providers	Categories
CRITICAL	HIGH	Azure	NETWORK

Description

SSH or RDP ports are open to the internet.

Impact

Potential data exposure	Visible in logs	User interaction required	Privileges required
True	True	False	True

Anyone can potentially access the machine. Vulnerabilities or brute-force attacks can be used to gain access to the machine.

Remediation guidelines

Consider using a bastion to protect the machine.

References

• Bastion host
• Azure Bastion Service

Was this page helpful?