Test ID:	1.3.6.1.4.1.25623.1.0.104901
Category:	General
Title:	RPC Portmapper Service Public WAN (Internet) / Public LAN Accessible
Summary:	The script checks if the target host is running a RPC Portmapper; service accessible from a public WAN (Internet) / public LAN.
Description:	Summary: The script checks if the target host is running a RPC Portmapper service accessible from a public WAN (Internet) / public LAN. Vulnerability Insight: A public accessible RPC Portmapper service is generally seen as / assumed to be a security misconfiguration. In addition openly accessible RPC Portmapper services can be abused for distributed denial of service (DDoS) reflection attacks against third parties. Please see the references for more information. Solution: - Only allow access to the RPC Portmapper service from trusted sources - Disable the service if unused / not required CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.