Threat H.M.NoH.3

URI: H.M.NoH.3

Package: NetworkConnectivity

< prev | next >

Description: Remote root access from AttackerSubnet via LogicalSubnet to insecure device Host: an attacker with access to AttackerSubnet gains access to host Host via an unprotected yet privileged service listening on LogicalSubnet .

Threat Type: Primary Threat

Matching Pattern:

H.M.NoH.3
MP-NoH

Finds an open network path not via the Internet from a remote attacker subnet to (but not via) a Host connected to a local subnet, and the associated network interface and access context, plus the location contexts for the host being on that subnet, and optionally the host manager.

        (empty)

        (empty)

CSG-SecureHostConfig

Device Host is configured securely: passwords or other authentication are set up including resetting default passwords for all user and administrator accounts, auto-run features disabled to prevent execution without user authorisation for files from removable storage or from the internet, and unnecessary software and especially network accessible services removed or disabled.