More Info:

No security group should allow unrestricted inbound access to TCP port 23 (Telnet).

Risk Level

Medium

Address

Security

Compliance Standards

PCIDSS, SOC2, GDPR, HITRUST, AWSWAF

Triage and Remediation

Remediation

To remediate the misconfiguration of unrestricted Telnet access in AWS, you can follow the below steps:

  1. Log in to the AWS Management Console.
  2. Go to the EC2 Dashboard.
  3. Click on the Security Groups option from the left navigation pane.
  4. Select the security group that has unrestricted Telnet access.
  5. Click on the Inbound Rules tab.
  6. Locate the rule that allows Telnet access (port 23) and select it.
  7. Click on the Delete button to remove the rule.
  8. Click on the Save Rules button to save the changes.

This will remove the unrestricted Telnet access from the security group and help remediate the misconfiguration.

Additional Reading: