Open Port Findings

Ingrid

The Open Ports risk vector observes ports that are exposed to the Internet. While certain ports must be open to support normal business functions and few companies will actually have no ports open, the fewer ports that are exposed to the Internet, the fewer openings there are for attack.

This article explains how to view the Open Port findings in each application and what information each finding contains.

How do I view the Open Ports findings in each application?

In the SPM App

Open the SPM App
Select Findings.
Select Findings Table.

In the CM App

Open the CM App.
Select a company from your Companies List.
Go to Vendor Risk, then select Findings.

In the Insurance App

Open the Insurance App.
Select a company from your Companies List.
Go to Client Risk, then select Findings

How do I receive Open Ports findings through the API?

Send a GET request to the findings endpoint for the company, with the risk vector filter set to open ports:

GET /v1/companies/entity_guid/findings?risk_vector=open_ports

Replace entity_guid with the entity GUID of the company.

How do I find the host behind a NAT or PAT finding?

Network Address Translation (NAT) and Port Address Translation (PAT) allow several hosts to share one public IP address.

If a company has several Network Address Translation (NAT) and Port Address Translation (PAT) zones among its findings, the source port for the IP address can help find the actual hosts.

What informtion does an Open Ports finding contain?

Each Open Ports finding includes the data in Findings and Diligence details, plus the fields in the table below.

Field	Description	Can be added as a table column?
Destination Port	The number of the port identified in the finding. For Open Ports, this is the port associated with the observed service.	Yes
Details	Details about the finding.	No
Final Location	The URL where Bitsight observed the headers.	Yes
Vulnerability Severity	Lists the severity level of the vulnerability	Yes
Issue	A summary of the finding	No
Product	The product or service observed on the port.	Yes
Remediation Instructions	How to resolve the finding. For verification steps, see how to verify that an Open Port finding has been remediated.	Yes
Server	The type of server using the port.	No
Status	The status code that shows whether the server could process the client’s request.	No
Title	The title of the webpage.	No
Transport Method	The transmission protocol, TCP or UDP, used in the connection.	Yes

To add a field as a column in the findings table, select the [3 Vertical Rectangles] Customize Columns menu icon and choose the field. Destination Port, Final Location, Vulnerability Severity, Product, Remediation Instructions, and Transport Method can be added as columns.

Publish Date or Recent Edits

October 28, 2024: Findings Table navigation instructions moved from Risks to a new Findings section in the menu.
January 18, 2024: Findings Table navigation by application.
October 2, 2023: Added Final Location customizable column.