Devices frequently shipped with Telnet, FTP, or vendor debug services enabled. These services were rarely hardened and became the main entry point for botnets that scan the internet for exposed devices.
Expose only the ports that are needed, remove debug and legacy services, disable UPnP exposure to the internet, and fuzz network services for buffer overflows and DoS conditions.
The same feature written the risky way, then with the fix applied.
How this risk has ranked in each OWASP release.
2014Latest
#03iot03-2014 Insecure Network Services
