Issue Details
Insecure Network Services
iot02 • Rank #2 in OWASP 2023
Explanation
IoT devices often expose network services for management, debugging, or functionality that are unnecessary for normal operation. Unprotected services like telnet, FTP, debug interfaces, and unencrypted APIs provide direct attack vectors. Internet-facing IoT devices are particularly vulnerable to automated scanning and exploitation.
Remedy
Disable all unnecessary network services and ports. Implement firewall rules to restrict access to required services only. Use secure protocols (SSH, TLS) instead of plaintext alternatives. Regularly scan for exposed services and close unused ports.
| Year | Rank | Category |
|---|---|---|
| 2018 | #2 | iot02 - Insecure Network Services |
| 2022 | #2 | iot02 - Insecure Network Services and Protocols |