All WAPs

wireless

LHS

switch|wireless

⚠ Why this is HIGH:
Transmits all data including credentials in plain text. Anyone on the network can capture usernames and passwords with a basic packet sniffer.

✓ Recommended Action:
Disable Telnet and replace with SSH. On Cisco IOS: no service telnet and transport input ssh under VTY lines.

Reference: CWE-319 (Cleartext Transmission)

⚠ Why this is HIGH:
Server Message Block exposed on the network. Exploited by WannaCry and NotPetya ransomware for lateral movement. A single compromised device can spread to all SMB-exposed hosts on the subnet instantly.

✓ Recommended Action:
Block port 445 at VLAN boundaries using ACLs. Disable SMBv1 on all Windows hosts. Isolate endpoints on separate VLANs from servers.

Reference: CVE-2017-0144 (EternalBlue / WannaCry)

⚠ Why this is HIGH:
Remote Desktop Protocol exposed on the network. The #1 initial access vector for ransomware in K-12 districts. Brute-force and credential-stuffing attacks are fully automated and continuous.

✓ Recommended Action:
Block port 3389 at VLAN boundaries. Restrict RDP access to admin jump hosts only. Require MFA for any remote access. Disable RDP on endpoints that do not require remote management.

Reference: CVE-2019-0708 (BlueKeep), CVE-2012-0002

⚠ Why this is MEDIUM:
Exposed management service detected on this host. Unnecessary open ports increase the attack surface and may be exploited for unauthorized access or lateral movement.

✓ Recommended Action:
Verify whether this service is required. If not, disable it. If required, restrict access via ACL to authorized management hosts only.

Reference: CWE-200 (Exposure of Sensitive Information)

⚠ Why this is MEDIUM:
Exposed management service detected on this host. Unnecessary open ports increase the attack surface and may be exploited for unauthorized access or lateral movement.

✓ Recommended Action:
Verify whether this service is required. If not, disable it. If required, restrict access via ACL to authorized management hosts only.

Reference: CWE-200 (Exposure of Sensitive Information)

⚠ Why this is MEDIUM:
Exposed management service detected on this host. Unnecessary open ports increase the attack surface and may be exploited for unauthorized access or lateral movement.

✓ Recommended Action:
Verify whether this service is required. If not, disable it. If required, restrict access via ACL to authorized management hosts only.

Reference: CWE-200 (Exposure of Sensitive Information)

⚠ Why this is MEDIUM:
Exposed management service detected on this host. Unnecessary open ports increase the attack surface and may be exploited for unauthorized access or lateral movement.

✓ Recommended Action:
Verify whether this service is required. If not, disable it. If required, restrict access via ACL to authorized management hosts only.

Reference: CWE-200 (Exposure of Sensitive Information)

⚠ Why this is INFO:
SSH management port exposed. While SSH is encrypted, exposed SSH surfaces are subject to brute-force attacks. Risk is elevated if default credentials or weak passwords are in use.

✓ Recommended Action:
Restrict SSH access to management VLANs via ACL. Enforce key-based authentication and disable password login. Use SSHv2 only.

Reference: CWE-307 (Improper Restriction of Excessive Authentication Attempts)

⚠ Why this is INFO:
Exposed management service detected on this host. Unnecessary open ports increase the attack surface and may be exploited for unauthorized access or lateral movement.

✓ Recommended Action:
Verify whether this service is required. If not, disable it. If required, restrict access via ACL to authorized management hosts only.

Reference: CWE-200 (Exposure of Sensitive Information)