Unrestricted Telnet Access Should Not Be Allowed
More Info:
No security group should allow unrestricted inbound access to TCP port 23 (Telnet).Risk Level
MediumAddress
SecurityCompliance Standards
PCIDSS, SOC2, GDPR, HITRUST, AWSWAFTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration of unrestricted Telnet access in AWS, you can follow the below steps:
- Log in to the AWS Management Console.
- Go to the EC2 Dashboard.
- Click on the Security Groups option from the left navigation pane.
- Select the security group that has unrestricted Telnet access.
- Click on the Inbound Rules tab.
- Locate the rule that allows Telnet access (port 23) and select it.
- Click on the Delete button to remove the rule.
- Click on the Save Rules button to save the changes.
Using CLI
Using CLI
To remediate the unrestricted Telnet access in AWS using AWS CLI, follow the steps below:Replace This should show that the Telnet access has been removed from the identified security group.By following these steps, you have successfully remediated the unrestricted Telnet access in AWS using AWS CLI.
- Open your terminal and configure your AWS CLI with the necessary credentials.
- Run the following command to list all the security groups in your AWS account:
- Identify the security group that has unrestricted Telnet access. Look for the security group that has port 23 open to all IP addresses (0.0.0.0/0).
- Note down the security group ID of the identified security group.
- Run the following command to revoke the Telnet access from the identified security group:
<security-group-id> with the ID of the identified security group.- Verify that the Telnet access has been revoked by running the following command:
Using Python
Using Python
To remediate the unrestricted Telnet access misconfiguration in AWS using Python, you can follow the below steps:In the above code, replace ‘sg-0123456789abcdef’ with the ID of the security group that you want to remediate.By following the above steps, you can remediate the unrestricted Telnet access misconfiguration in AWS using Python.
- First, you need to identify the security group(s) that have unrestricted Telnet access. You can use the following Python code to retrieve the security groups:
- Once you have identified the security group(s) that have unrestricted Telnet access, you can remove the Telnet rule(s) from the security group(s). You can use the following Python code to remove the Telnet rule(s):