Network misconfigurations

Default security group allows inbound unrestricted traffic

Risk Level

Hazardous (3)

Compliance Frameworks


An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified the default security group ""{AwsEc2SecurityGroup}"" ({AwsEc2SecurityGroup.GroupId}) is configured to allow inbound access from any IP address ( or ::/0) for {SgIpPermissions.PortRange}