{"id":482,"date":"2026-09-30T07:48:43","date_gmt":"2026-09-30T07:48:43","guid":{"rendered":"http:\/\/www.cert.hr\/tjedni-izvjestaji\/ranjivi-servisi\/"},"modified":"2026-11-04T17:12:58","modified_gmt":"2026-11-04T17:12:58","slug":"ranjivi-servisi","status":"publish","type":"page","link":"https:\/\/cert.hr\/en\/tjedni-izvjestaji\/ranjivi-servisi\/","title":{"rendered":"Ranjivi servisi"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Nacionalni CERT svakog ponedjeljka priprema tjedne izvje\u0161taje o ranjivim servisima i dostavlja ih vlasnicima IP adresnog prostora u kojem je zabilje\u017een javno dostupan servis. Izvje\u0161taji se dostavljaju u \u201c.zip\u201d formatu, a unutar njega se nalazi \u201c.csv\u201d datoteka s nazivom vlasnika adresnog prostora.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Datoteka je podijeljena u devet stupaca, a opis svakog pojedinog stupca se nalazi u nastavku:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Stupac<\/th><th>Opis<\/th><\/tr><\/thead><tbody><tr><td><code>timestamp<\/code><\/td><td>datum, vrijeme i vremenska oznaka kada je ranjivost otkrivena<\/td><\/tr><tr><td><code>IP<\/code><\/td><td>IP adresa na kojoj je otkrivena ranjivost<\/td><\/tr><tr><td><code>port<\/code><\/td><td>port na kojemu se nalazi ranjivost<\/td><\/tr><tr><td><code>hostname<\/code><\/td><td>hostname dobiven putem reverznog DNS-a<\/td><\/tr><tr><td><code>protocol<\/code><\/td><td>protokol<\/td><\/tr><tr><td><code>as_name<\/code><\/td><td>naziv izvori\u0161nog autonomnog sustava (AS)<\/td><\/tr><tr><td><code>asn<\/code><\/td><td>ASN izvori\u0161ta<\/td><\/tr><tr><td><code>classification_type<\/code><\/td><td>tip klasifikacije ranjivosti<\/td><\/tr><tr><td><code>classification_identifier<\/code><\/td><td>identifikator klasifikacije ranjivosti<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Najva\u017eniji je drugi stupac pod oznakom \u201cIP\u201d u kojem se nalazi IP adresa ure\u0111aja na kojem je zabilje\u017een javno dostupan servis. Va\u017eno je napomenuti kako se radi o javnoj IP adresi koja se ne mora podudarati s adresom ra\u010dunala, ona obi\u010dno posjeduju vlastitu privatnu IP adresu. Prvi stupac \u201ctimestamp\u201d predstavlja vrijeme kada je izvr\u0161ena provjera dostupnosti navedenog servisa. Za daljnje postupanje potrebno je provjeriti o kojem servisu se radi \u0161to je vidljivo u stupcu \u201cclassification_identifier\u201d.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a0d594cb4&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a0d594cb4\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2021\/04\/MicrosoftTeams-image-6-1024x635.png\" alt=\"Primjer sadr\u017eaja tjednog izvje\u0161taja o ranjivim servisima\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">U nastavku mo\u017eete saznati vi\u0161e o svakom servisu te pro\u010ditati kako sprije\u010diti njegovo iskori\u0161tavanje.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Servisi<\/h2>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Android Debug Bridge (ADB) \u2013 \u201caccessible-adb\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Android Debug Bridge (ADB) je naredbeni alat koji se koristi za komunikaciju s ure\u0111ajem, instalaciju i debugiranje (ispravljanje pogre\u0161aka) aplikacija. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je ADB javno dostupan na TCP portu 5555, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput izvr\u0161avanja proizvoljnog programskog koda, otkrivanja osjetljivih informacija ili kompromitacije te dodavanja u botnet mre\u017ee.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da potpuno onemogu\u0107ite ADB.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati vlastiti ure\u0111aj kako biste vidjeli ima li omogu\u0107en ADB, potrebno je koristiti Android Developer tools i izvr\u0161iti naredbu \u201cadb connect [IP]\u201d. Ako je veza uspje\u0161na, naredba \u201cadb devices\u201d izlistat \u0107e IP na koji ste se povezali.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o ADB-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-adb-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-adb-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/developer.android.com\/studio\/command-line\/adb\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/developer.android.com\/studio\/command-line\/adb<\/a><\/li>\n\n\n<li><a href=\"https:\/\/source.android.com\/security\/overview\/implement\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/source.android.com\/security\/overview\/implement<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Apple Filing Protocol (AFP) \u2013 \u201caccessible-afp\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Apple Filing Protocol (AFP) je mre\u017eni protokol koji je dio Apple File Service-a (AFS) te se koristi za usluge dijeljenja datoteka u MacOS sustavima. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je AFS javno dostupan na Internetu, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput izazivanja DoS napada, izvr\u0161avanja proizvoljnog programskog koda, izvo\u0111enja \u2018directory traversal\u2019 napada. Uz navedeno mogu\u0107e je prikupljanje osjetljivih podataka poput vrste ure\u0111aja, prihva\u0107ene metode provjere autenti\u010dnosti, interne IP adrese, naziv poslu\u017eitelja i DirectoryService koji koristi.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da odaberete najsigurniju metodu korisni\u010dke autentifikacije, onemogu\u0107ite TCP\/548 port, omogu\u0107ite \u0161ifriranje prometa i koristite virtualnu privatnu mre\u017eu (VPN) kako bi samo ovla\u0161teni korisnici imali omogu\u0107eni pristup sustavu.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati AFP dostupnost poku\u0161ajte s naredbom \u201cnmap -v -p 548 [IP]\u201d.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o AFP-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-afp-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-afp-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/techterms.com\/definition\/afp\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/techterms.com\/definition\/afp<\/a><\/li>\n\n\n<li><a href=\"https:\/\/developer.apple.com\/library\/archive\/documentation\/Networking\/Conceptual\/AFP\/AFPSecurity\/AFPSecurity.html\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/developer.apple.com\/library\/archive\/documentation\/Networking\/Conceptual\/AFP\/AFPSecurity\/AFPSecurity.html<\/a><\/li>\n\n\n<li><a href=\"https:\/\/flylib.com\/books\/en\/4.385.1.117\/1\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/flylib.com\/books\/en\/4.385.1.117\/1\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Apple Remote Desktop (ARD) \u2013 \u201daccessible-ard\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Apple Remote Desktop (ARD) je sustav za udaljeno upravljanje i nadziranje Apple ure\u0111aja na mre\u017ei. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je ARD javno dostupan na UDP portu 3283, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput izvr\u0161avanja proizvoljnog programskog koda, zaobila\u017eenja sigurnosnih ograni\u010denja, otkrivanja osjetljivih informacija, UDP amplification napada.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da postavite sigurnosne ovlasti pristupa te \u0161ifrirate mre\u017eni promet i podatke.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati ARD dostupnost poku\u0161ajte s naredbom \u201cnmap -sU -A -p 3283 [IP]\u201d.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o ARD-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-apple-remote-desktop-ard-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-apple-remote-desktop-ard-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/support.apple.com\/guide\/remote-desktop\/welcome\/mac\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/support.apple.com\/guide\/remote-desktop\/welcome\/mac<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Constrained Application Protocol (CoAP) \u2013 \u201caccessible-coap\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Constrained Application Protocol (CoAP) je specijalizirani protokol za mre\u017eni prijenos kod ograni\u010denih \u010dvorova i mre\u017ea. Dizajniran je za machine-to-machine (M2M) aplikacije kod automatizacije i pametnih ure\u0111aja. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je CoAP javno dostupan na UDP portu 5683, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput DDoS amplification napada (RDDoS), otkrivanja osjetljivih informacija ili izvr\u0161avanja proizvoljnog programskog koda.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da postavite \u0161to ve\u0107u razinu DTLS-a te definirate sigurnosne ovlasti pristupa.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o CoAP-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-coap-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-coap-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/tools.ietf.org\/html\/rfc7252\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/tools.ietf.org\/html\/rfc7252<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan File Transfer Protocol (FTP) \u2013 \u201caccessible-ftp\u201d<\/summary>\n<p class=\"wp-block-paragraph\">File Transfer Protocol (FTP) je protokol za prijenos datoteka putem mre\u017ee. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je FTP javno dostupan na TCP portu 21 zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput otkrivanja osjetljivih informacija zbog ne kori\u0161tenja enkripcije podataka, prijenosa malicioznih datoteka, izazivanja DoS stanja ili izvo\u0111enja XSS napada.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da zamijenite FTP s nekim od sigurnijih rje\u0161enja poput FTPS ili SFTP, kako bi podaci bili \u0161ifrirani te implementirajte sigurne prakse za zaporke, korisni\u010dke ra\u010dune, mape i podatke.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati FTP dostupnost poku\u0161ajte s naredbom \u201cnmap -v -p 21 [IP]\u201d.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o FTP-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-ftp-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-ftp-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.helpsystems.com\/blog\/10-essential-tips-securing-ftp-and-sftp-servers\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.helpsystems.com\/blog\/10-essential-tips-securing-ftp-and-sftp-servers<\/a><\/li>\n\n\n<li><a href=\"https:\/\/tools.ietf.org\/html\/rfc959\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/tools.ietf.org\/html\/rfc959<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Hypertext Transfer Protocol (HTTP) \u2013 \u201caccessible-http\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Hypertext Transfer Protocol (HTTP) je protokol za prijenos podataka i metapodataka putem mre\u017ee. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je HTTP javno dostupan na TCP portovima 80\/8080, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput prislu\u0161kivanja mre\u017enog prometa odre\u0111enim alatima te \u010ditanje osjetljivih podataka, kao \u0161to su lozinke, koji se razmjenjuju u obi\u010dnom \u010ditljivom tekstu (eng. plain text).<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da implementirate digitalni certifikat koji omogu\u0107uje kriptirani i sigurni HTTPS protokol te ako je mogu\u0107e na poslu\u017eitelju omogu\u0107iti HSTS.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o HTTP-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-http-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-http-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/tools.ietf.org\/html\/rfc2616\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/tools.ietf.org\/html\/rfc2616<\/a><\/li>\n\n\n<li><a href=\"https:\/\/developers.google.com\/search\/docs\/advanced\/security\/https\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/developers.google.com\/search\/docs\/advanced\/security\/https<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Microsoft Remote Desktop Protocol Extension User Datagram Protocol (MSRDPEUDP) \u2013 \u201caccessible-msrdpeudp\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Microsoft Remote Desktop Protocol Extension User Datagram Protocol (MSRDPEUDP) je pro\u0161irenje koje omogu\u0107ava UDP prijenos za uslugu Microsoft Remote Desktop. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je MS-RDPEUDP javno dostupan na UDP portu 3389, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput izvr\u0161avanja proizvoljnog programskog koda ili izvo\u0111enja DDoS amplification napada.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da koristite raspon rednih brojeva, validaciju RDP-UDP datagrama, postavite obavijesti o zagu\u0161enju, postavite vatrozid ili virtualnu privatnu mre\u017eu (VPN) te omogu\u0107ite dvofaktorsku autentifikaciju i koristite sigurne prakse za zaporke.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o MS-RDPEUDP-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-ms-rdpeudp\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-ms-rdpeudp\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/docs.microsoft.com\/en-us\/openspecs\/windows_protocols\/ms-rdpeudp\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/docs.microsoft.com\/en-us\/openspecs\/windows_protocols\/ms-rdpeudp\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.cloudflare.com\/learning\/access-management\/rdp-security-risks\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.cloudflare.com\/learning\/access-management\/rdp-security-risks\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Radmin \u2013 \u201caccessible-radmin\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Radmin je alat za udaljeni pristup ra\u010dunalu ili nekom drugom ure\u0111aju. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je Radmin javno dostupan na TCP portu 4899, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za otkrivanje osjetljivih informacija zbog ne kori\u0161tenja enkripcije ili neovla\u0161tenog pristupa sustavu zbog neispravne konfiguracije.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da filtrirate IP adrese i zatvorite portove te za\u0161titite korisni\u010dke podatke sna\u017enim zaporkama.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati Radmin dostupnost poku\u0161ajte s naredbom \u201d nmap -v -sV -p 4899 [IP]\u201d.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o Radmin-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-radmin-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-radmin-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.radmin.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.radmin.com\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Rsync \u2013 \u201caccessible-rsync\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Rsync je alat za brzi prijenos datoteka na Unix sustavima. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je Rsync javno dostupan na TCP portu 873, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput izvr\u0161avanja proizvoljnog programskog koda, otkrivanja osjetljivih informacija, zaobila\u017eenja sigurnosnih ograni\u010denja ili naru\u0161avanja povjerljivosti i integriteta podataka.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da filtrirate IP adrese, \u0161ifrirate promet i redovno a\u017eurirate alat.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati Rsync dostupnost poku\u0161ajte s naredbom \u201d nmap -v -p 873 [IP]\u201d.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o Rsync-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-rsync-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-rsync-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/rsync.samba.org\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/rsync.samba.org\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Ubiquiti Discovery Service \u2013 \u201caccessible-ubiquiti-discovery-service\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Ubiquiti Discovery Service je usluga otkrivanja Ubiquiti ure\u0111aja na mre\u017ei koja je omogu\u0107ena prema zadanim postavkama. U izvje\u0161taju se nalazi popis javno dostupnih Ubiquiti ure\u0111aja, na UDP portu 10001, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istih za zlonamjerne aktivnosti poput izazivanja DoS stanja i otkrivanja osjetljivih informacija poput vrste ure\u0111aja i firmware verzije.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da onemogu\u0107ite uslugu otkrivanja ure\u0111aja ako nije potrebna i ograni\u010dite pristup pouzdanim klijentima.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o usluzi otkrivanja Ubiquiti ure\u0111aja mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-ubiquiti-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-ubiquiti-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Domain Name System (DNS) \u2013 \u201cdns-open-resolver\u201d<\/summary>\n<p class=\"wp-block-paragraph\">DNS Open Resolver je DNS poslu\u017eitelj koji pru\u017ea rekurzivno razlu\u010divanje imena za neodre\u0111ene IP adrese. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je DNS Open Resolver javno dostupan na Internetu, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput izvr\u0161avanja DNS amplification ili DDoS napada.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da onemogu\u0107ite ili ograni\u010dite rekurziju na pouzdane klijente u konfiguraciji DNS poslu\u017eitelja.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o DNS Open Resolverima mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/dns-open-resolvers-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/dns-open-resolvers-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>\u201cntp-monitor\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Network Time Protocol (NTP) je mre\u017eni protokol za uskla\u0111ivanje vremena izme\u0111u sustava, a NTP monitor je funkcija za pra\u0107enje prometa. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je NTP monitor javno dostupan na Internetu, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput izvo\u0111enja amplification ili DoS napada.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da onemogu\u0107ite upite o statusu u konfiguraciji NTP poslu\u017eitelja ili ograni\u010dite pristup pouzdanim klijentima.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Za provjeru ranjivosti sustava mo\u017eete koristiti sljede\u0107u naredbu:<\/p>\n\n\n<p class=\"wp-block-paragraph\">ntpdc -n -c monlist [IP]<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o NTP monitoru mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/ntp-monitor-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/ntp-monitor-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>\u201cntp-version\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Network Time Protocol (NTP) je mre\u017eni protokol za uskla\u0111ivanje vremena izme\u0111u sustava, a NTP version je naredba za navo\u0111enje verzije u NTP paketima. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je NTP version javno dostupan na Internetu, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput izvo\u0111enja amplification ili DoS napada pomo\u0107u naredbe \u2018readvar\u2019.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Za provjeru ranjivosti sustava mo\u017eete koristiti sljede\u0107u naredbu:<\/p>\n\n\n<p class=\"wp-block-paragraph\">ntpq -c rv [IP]<\/p>\n\n\n<p class=\"wp-block-paragraph\">Rje\u0161enje:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li>upute za ograni\u010davanje naredbe \u2018readvar\u2019 za Linux ure\u0111aje dostupne su <a href=\"https:\/\/support.ntp.org\/bin\/view\/Support\/AccessRestrictions\" target=\"_blank\" rel=\"noreferrer noopener\">OVDJE<\/a><\/li>\n\n\n<li>upute za ograni\u010davanje naredbe \u2018readvar\u2019 za Cisco mre\u017enu opremu dostupne su <a href=\"https:\/\/seriousnetworks.wordpress.com\/2013\/08\/08\/securing-ntp-on-cisco-ios-devices\/\" target=\"_blank\" rel=\"noreferrer noopener\">OVDJE<\/a><\/li>\n<\/ul>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o NTP versionu mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/ntp-version-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/ntp-version-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Character Generator Protocol (CharGen) \u2013 \u201copen-chargen\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Character Generator Protocol (CharGen) je alat za testiranje, debugiranje i mjerenje te usluga za generiranje znakova. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je CharGen javno dostupan na UDP portu 19, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput izvo\u0111enja amplification ili DoS napada.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Budu\u0107i da su proizvo\u0111a\u010di prestali davati podr\u0161ku za CharGen, kako ne bi do\u0161lo do iskori\u0161tavanja ranjivosti, potrebno je onemogu\u0107iti alat.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o CharGenu mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-chargen-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-chargen-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/tools.ietf.org\/html\/rfc864\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/tools.ietf.org\/html\/rfc864<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan CPE WAN Management Protocol \u2013 \u201copen-cwmp\u201d<\/summary>\n<p class=\"wp-block-paragraph\">CPE WAN Management Protocol (CWMP) je mre\u017eni protokol za daljinsko upravljanje korisni\u010dkom opremom na mre\u017ei. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je CWMP javno dostupan na Internetu, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za naru\u0161avanje povjerljivosti, cjelovitosti i dostupnosti podataka te izvr\u0161avanja proizvoljnog programskog koda.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da koristite sigurne konekcije (omogu\u0107ite TLS), zatvorite otvorene portove, omogu\u0107ite potvr\u0111ivanje parametara podataka i certificirajte ure\u0111aje.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o CWMP-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/scan.shadowserver.org\/cwmp\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/scan.shadowserver.org\/cwmp\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/cwmp-data-models.broadband-forum.org\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/cwmp-data-models.broadband-forum.org\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Elasticsearch \u2013 \u201copen-elasticsearch\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Elasticsearch je alat temeljen na Apache Lucene, a koristi se za pretra\u017eivanje i analitiku podataka. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je Elasticsearch javno dostupan na Internetu, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput otkrivanja osjetljivih informacija ili izvr\u0161avanja proizvoljnog programskog koda budu\u0107i da prema zadanim postavkama navedeni servis ne podr\u017eava autentifikaciju.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da redovno a\u017eurirate alat, blokirate dolazni promet prema portovima 9200 i 9300, ne pokre\u0107ete Elasticsearch kao root, onemogu\u0107ite dinami\u010dko skriptiranje i koristite virtualnu privatnu mre\u017eu (VPN).<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati Elasticsearch dostupnost poku\u0161ajte s naredbom \u201d curl -XGET http:\/\/[IP]:9200\/\u201d.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o Elasticsearch-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-elasticsearch-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-elasticsearch-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.elastic.co\/elasticsearch\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.elastic.co\/elasticsearch\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Internet Key Exchange (IKE) \u2013 \u201copen-ike\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Internet Key Exchange (IKE) je IPsec protokol koji se koristi za postavljanje sigurnosne asocijacije (SA). U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je IKE javno dostupan na UDP portu 500, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za naru\u0161avanje povjerljivosti, cjelovitosti i dostupnosti podataka te preuzimanja sadr\u017eaja memorije koje mo\u017ee dovesti do otkrivanja povjerljivih informacija.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da redovito a\u017eurirate mre\u017ene ure\u0111aje, postavite kontrole pristupa, zatvorite otvorene portove i filtrirate promet.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o IKE-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/tools.ietf.org\/html\/rfc2409\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/tools.ietf.org\/html\/rfc2409<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.juniper.net\/documentation\/us\/en\/software\/junos\/vpn-ipsec\/topics\/topic-map\/security-ike-basics.html\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.juniper.net\/documentation\/us\/en\/software\/junos\/vpn-ipsec\/topics\/topic-map\/security-ike-basics.html<\/a><\/li>\n\n\n<li><a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-20160916-ikev1\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-20160916-ikev1<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Intelligent Platform Management Interface (IPMI) \u2013 \u201copen-ipmi\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Intelligent Platform Management Interface (IPMI) je skup standardiziranih specifikacija sustava za upravljanje platformama. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je IPMI javno dostupan na UDP portu 623, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za naru\u0161avanje povjerljivosti, cjelovitosti i dostupnosti podataka.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da filtrirate promet, koristite sna\u017ene zaporke i kontrolirate pristup.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o IPMI-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-ipmi-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-ipmi-report\/<\/a><\/li>\n\n\n<li><a href=\"http:\/\/fish2.com\/ipmi\/\" target=\"_blank\" rel=\"noreferrer noopener\">http:\/\/fish2.com\/ipmi\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Internet Printing Protocol (IPP) \u2013 \u201copen-ipp\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Internet Printing Protocol (IPP) je protokol za distribuirano printanje putem mre\u017ee. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je IPP javno dostupan na TCP portu 631, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput otkrivanja osjetljivih informacija, nedozvoljenog pristupa ure\u0111ajima ili izvr\u0161avanja proizvoljnog programskog koda.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da postavite odgovaraju\u0107e kontrole pristupa i sigurne mehanizme autorizacije.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o IPP-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-ipp-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-ipp-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/tools.ietf.org\/html\/std92\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/tools.ietf.org\/html\/std92<\/a><\/li>\n<\/ul>\n\n\n<p class=\"wp-block-paragraph\"><strong>Javno dostupan Lightweight Directory Access Protocol (LDAP) \u2013 \u201copen-ldap<\/strong>\u201c<\/p>\n\n\n<p class=\"wp-block-paragraph\">Lightweight Directory Access Protocol (LDAP) je mre\u017eni protokol koji se koristi za pristup i odr\u017eavanje informacijskih usluga distribuiranih direktorija. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je LDAP javno dostupan na UDP portu 389, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput otkrivanja osjetljivih informacija ili izvo\u0111enja DDoS napada.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da koristite LDAP sa StartTLS ili LDAPS (LDAP preko TLS\/ SSL-a) koji pru\u017ea sigurnu i \u0161ifriranu komunikaciju izme\u0111u klijenata i LDAP poslu\u017eitelja te ograni\u010dite pristup LDAP poslu\u017eitelju.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o LDAP-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-ldap-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-ldap-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Multicast DNS (mDNS) \u2013 \u201copen-mdns\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Multicast DNS (mDNS) protokol se koristi za dobivanje DNS mogu\u0107nosti unutar manje (lokalne) mre\u017ee u kojoj ne postoji DNS poslu\u017eitelj. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je mDNS javno dostupan na UDP portu broj 5353, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput otkrivanja osjetljivih informacija o mre\u017ei ili izvo\u0111enje DDoS napada.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da onemogu\u0107ite navedeni protokol ukoliko nije potreban ili da na vatrozidu onemogu\u0107ite ulazni promet na UDP port 5353.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati mDNS dostupnost poku\u0161ajte s naredbom \u201cdig @[IP] -p 5353 -t ptr _services._dns-sd._udp.local\u201d. Ako je protokol dostupan izlistat \u0107e se popis servisa.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o mDNS-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-mdns-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-mdns-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/tools.ietf.org\/html\/rfc6762\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/tools.ietf.org\/html\/rfc6762<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Memcached \u2013 \u201copen-memcached\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Memcached je generi\u010dki sustav za distribuirano ke\u0161iranje memorije \u010desto kori\u0161ten za ubrzavanje dinami\u010dkih web aplikacija. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je Memcached javno dostupan na portovima 11211\/UDP (do verzije 1.5.5) i 11211\/TCP zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput amplifikacije DDoS napada (UDP) ili otkrivanja osjetljivih informacija budu\u0107i da prema zadanim postavkama navedeni servis ne podr\u017eava autentifikaciju.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako bi se za\u0161titili od takvih napada, savjetujemo da: ograni\u010dite pristup Memcached servisu na poznate ure\u0111aje i\/ili blokirate dolazni promet prema portovima 11211\/TCP i 11211\/UDP.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o Memcached-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"http:\/\/memcached.org\/\" target=\"_blank\" rel=\"noreferrer noopener\">http:\/\/memcached.org\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-memcached-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-memcached-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupna MongoDB \u2013 \u201copen-mongodb\u201d<\/summary>\n<p class=\"wp-block-paragraph\">MongoDB je popularan NoSQL sustav baza podataka \u010desto kori\u0161ten kao back-end za web aplikacije. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je MongoDB javno dostupan na portu 27017\/TCP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti kao \u0161to su neovla\u0161tena promjena\/brisanje podataka ili otkrivanje osjetljivih informacija ukoliko ne postoji provjera autenti\u010dnosti.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da: omogu\u0107ite pristup samo poznatim ure\u0111ajima, blokirate dolazni promet prema portu 27017\/TCP i kriptirate komunikaciju.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o MongoDB-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.mongodb.com\/blog\/post\/mongodb-security-best-practices\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.mongodb.com\/blog\/post\/mongodb-security-best-practices<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-mongodb-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-mongodb-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Message Queueing Telemetry Transport (MQTT) \u2013 \u201copen-mqtt\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Message Queueing Telemetry Transport (MQTT) je protokol za razmjenu poruka dizajniran za Internet of Things (IoT) ure\u0111aje. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je MQTT javno dostupan na portu 1883\/TCP i na portu 8883\/TCP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput otkrivanja osjetljivih informacija ukoliko autentifikacija nije omogu\u0107ena.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da omogu\u0107ite autentifikaciju, koristite sigurne konekcije (omogu\u0107ite TLS) i certificirate ure\u0111aje.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o MQTT-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/mqtt.org\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/mqtt.org\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-mqtt-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-mqtt-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.shadowserver.org\/news\/open-mqtt-report-expanding-the-hunt-for-vulnerable-iot-devices\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/news\/open-mqtt-report-expanding-the-hunt-for-vulnerable-iot-devices\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Microsoft SQL-Server \u2013 \u201copen-mssql\u201d<\/summary>\n<p class=\"wp-block-paragraph\">MS-SQL Server Resolution service uklju\u010duje i tzv. \u2018uslugu preglednika\u2019 (eng. browser service) koja omogu\u0107uje korisnicima spajanje na instance baze podataka (koje nisu na inicijalnim portovima) iako ne znaju broj porta na koji se trebaju spojiti te omogu\u0107uje otkrivanje informacija o nazivu SQL poslu\u017eitelja i nazivu SQL usluge. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je ta usluga javno dostupna na portu 1434\/UDP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja iste za zlonamjerne aktivnosti poput izvo\u0111enja DDoS napada ili otkrivanja osjetljivih informacija.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da potpuno onemogu\u0107ite uslugu ako ju ne koristite ili ograni\u010dite pristup samo poznatim ure\u0111ajima te blokirate dolazni promet na portu 1434\/UDP.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o tome mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-ms-sql-server-resolution-service-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-ms-sql-server-resolution-service-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Network Address Translation \u2013 Port Mapping Protocol (NAT-PMP) \u2013 \u201copen-natpmp\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Network Address Translation \u2013 Port Mapping Protocol (NAT-PMP) se koristi za automatiziranje postavki NAT-a i proslje\u0111ivanja portova. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je NAT-PMP javno dostupan na portu 5351\/UDP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput izvo\u0111enja DoS napada, otkrivanja osjetljivih informacija ili presretanje mre\u017enog prometa.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da potpuno onemogu\u0107ite protokol ako vam nije potreban ili ograni\u010dite mre\u017ee\/su\u010delja koja \u0107e primate i odgovarati na NAT-PMP upite.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o NAT-PMP-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/tools.ietf.org\/html\/rfc6886\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/tools.ietf.org\/html\/rfc6886<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-nat-pmp-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-nat-pmp-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.kb.cert.org\/vuls\/id\/184540\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.kb.cert.org\/vuls\/id\/184540<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Portmapper \u2013 \u201copen-portmapper\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Portmapper (portmap, rpcbind) je servis koji se koristi za mapiranje RPC (remote procedure calls) zahtjeva prema mre\u017enom servisu. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je Portmapper javno dostupan na portovima 111\/TCP i 111\/UDP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za izvo\u0111enje DDoS napada.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da potpuno onemogu\u0107ite servis ako ga ne koristite ili blokirate dolazni promet prema portovima 111\/TCP i 111\/UDP.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati Portmapper dostupnost poku\u0161ajte s naredbom \u201crpcinfo -T udp -p [IP]\u201d. Va\u017eno je naglasiti kako odre\u0111ene implementacije prvo poku\u0161avaju putem TCP protokola te ako tad ne uspije dalje ne poku\u0161ava putem UDP protokola.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o Portmapperu mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-portmapper-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-portmapper-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Quote of the Day (QOTD) \u2013 \u201copen-qotd\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Quote of the Day (QOTD) je servis koji su koristili sistem administratori za slanje dnevnog citata na zahtjev korisnika, naj\u010de\u0161\u0107e u svrhu testiranja. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je QOTD javno dostupan na portu 17\/UDP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za amplifikaciju DDoS napada.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da potpuno onemogu\u0107ite protokol.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o QOTD-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/tools.ietf.org\/html\/rfc865\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/tools.ietf.org\/html\/rfc865<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-qotd-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-qotd-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Remote Desktop (RDP) \u2013 \u201copen-rdp\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Remote Desktop (RDP) je protokol koji se koristi za udaljeni pristup ra\u010dunalu. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je RDP javno dostupan na portovima 3389\/TCP i 3389\/UDP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog\/iste za zlonamjerne aktivnosti poput otkrivanja osjetljivih informacija ili preuzimanja kontrole nad ra\u010dunalom.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da onemogu\u0107ite servis ako ga ne koristite ili ograni\u010dite pristup putem VPN-a te koristite kompleksne lozinke za pristup.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati RDP dostupnost poku\u0161ajte s naredbom \u201cnmap -v \u2013script=ssl-cert -p 3389 [IP]\u201d.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o RDP-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-rdp-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-rdp-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/scan.shadowserver.org\/rdp\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/scan.shadowserver.org\/rdp\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Remote Dictionary Server (Redis) \u2013 \u201copen-redis\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Redis (Remote Dictionary Server) je distribuirana unutar memorijska klju\u010d-vrijednost baza podataka \u010desto kori\u0161tena u dinami\u010dkim web aplikacijama. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je Redis javno dostupan na portu 6379\/TCP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput otkrivanja osjetljivih podataka i\/ili neovla\u0161tenu izmjenu podataka budu\u0107i da navedeni servis ne podr\u017eava autentifikaciju.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako bi se za\u0161titili od takvih napada, savjetujemo da ograni\u010dite pristup na poznate ure\u0111aje i\/ili blokirate dolazni promet na portu 6379\/TCP.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o Redisu mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/redis.io\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/redis.io\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-redis-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-redis-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan mail relay \u2013 \u201copen-relay\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Open mail relay je SMTP poslu\u017eitelj konfiguriran na na\u010din da bilo tko mo\u017ee poslati elektroni\u010dku po\u0161tu preko tog poslu\u017eitelja bez obzira na to \u0161to po\u0161ta nije poslana od ili prema poznatim korisnicima. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je SMTP poslu\u017eitelj konfiguriran kao relay te postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput \u0161irenja ne\u017eeljene ili zlonamjerne elektroni\u010dke po\u0161te.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da konfigurirate va\u0161 SMTP poslu\u017eitelj tako da propu\u0161ta po\u0161tu poslanu od poznatih korisnika ili IP adresa.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o Open mail relayu mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/en.wikipedia.org\/wiki\/Open_mail_relay\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/en.wikipedia.org\/wiki\/Open_mail_relay<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.cmu.edu\/iso\/governance\/guidelines\/denyrelay.html\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.cmu.edu\/iso\/governance\/guidelines\/denyrelay.html<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Server Message Block (SMB) \u2013 \u201copen-smb\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Server Message Block (SMB) je komunikacijski protokol kori\u0161ten za dijeljeni pristup datotekama, pisa\u010dima i serijskim portovima unutar mre\u017ee. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je SMB javno dostupan na portu 445\/TCP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput otkrivanja osjetljivih informacija ili udaljenog pristupa sustavu ako je neispravno konfiguriran.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da ograni\u010dite pristup na poznate ure\u0111aje i\/ili blokirate dolazni promet na portu 445\/TCP.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati SMB dostupnost poku\u0161ajte s naredbom \u201cnmap -v -p 445 [IP]\u201d.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o SMB-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-smb-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-smb-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/scan.shadowserver.org\/smb\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/scan.shadowserver.org\/smb\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Simple Network Management Protocol (SNMP) \u2013 \u201copen-snmp\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Simple Network Management Protocol (SNMP) je mre\u017eni protokol kori\u0161ten za nadzor i upravljanje mre\u017enim ure\u0111ajima. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je SNMP javno dostupan na portu 161\/UDP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput izvo\u0111enja DDoS napada ili otkrivanja osjetljivih informacija.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da podesite autentifikaciju te ograni\u010dite pristup SNMP poslu\u017eitelju samo poznatim ure\u0111ajima, blokirate dolazni promet na portu 161\/UDP te koristite najnoviju verziju koja omogu\u0107ava kriptirani promet.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o SNMP-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-snmp-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-snmp-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Simple Service Discovery Protocol (SSDP) \u2013 \u201copen-ssdp\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Simple Service Discovery Protocol (SSDP) je mre\u017eni protokol za reklamiranje i otkrivanje mre\u017enih servisa te informacija o prisutnosti. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je SSDP javno dostupan na portu 1900\/UDP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput izvo\u0111enja DDoS napada.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da ograni\u010dite pristup na poznate ure\u0111aje i\/ili blokirate dolazni promet na portu 1900\/UDP.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o SSDP-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-ssdp-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-ssdp-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Telnet \u2013 \u201copen-telnet\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Telnet je zastarjeli mre\u017eni protokol za udaljeni pristup naredbenim linijama ure\u0111aja. Danas se koristi u IoT ure\u0111ajima. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je Telnet javno dostupan na portu 23\/TCP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za otkrivanje osjetljivih informacija poput lozinki ili preuzimanje kontrole nad ure\u0111ajem.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da ograni\u010dite pristup na poznate ure\u0111aje i\/ili blokirate dolazni promet na portu 23\/TCP.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati Telnet dostupnost poku\u0161ajte s naredbom \u201cnmap -v -p 23 [IP]\u201d.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o Telnetu mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-telnet-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-telnet-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Trivial File Transfer Protocol (TFTP) \u2013 \u201copen-tftp\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Trivial File Transfer Protocol (TFTP) je jednostavan transportni protokol koji omogu\u0107ava klijentu da dohvati ili u\u010dita podatak na udaljenom poslu\u017eitelju. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je TFTP javno dostupan na portu 69\/UDP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput amplifikacije DDoS napada.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da onemogu\u0107ite servis ili ograni\u010dite pristup na poznate ure\u0111aje.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o tome mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/tools.ietf.org\/html\/rfc1350\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/tools.ietf.org\/html\/rfc1350<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-accessible-tftp-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/open-accessible-tftp-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/scan.shadowserver.org\/tftp\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/scan.shadowserver.org\/tftp\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan Virtual Network Computing (VNC) \u2013 \u201copen-vnc\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Virtual Network Computing (VNC) je grafi\u010dki alat za udaljeno upravljanje ra\u010dunalima koji prenosi doga\u0111aje tipkovnice i mi\u0161a s jednog ra\u010dunala na drugo. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je VNC javno dostupan na portu 5900\/TCP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za preuzimanje kontrole nad ra\u010dunalom.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da ograni\u010dite pristup na poznate ure\u0111aje, \u0161ifrirate promet, konfigurirate tuneliranje putem SSH protokola i koristite sna\u017ene lozinke za pristup.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati VNC dostupnost poku\u0161ajte s naredbom \u201cnmap -v -p 5900 [IP]\u201d.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o tome mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/tools.ietf.org\/html\/rfc7869\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/tools.ietf.org\/html\/rfc7869<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-vnc-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-vnc-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Javno dostupan X Display Manager Control Protocol (XDMCP) \u2013 \u201copen-xdmcp\u201d<\/summary>\n<p class=\"wp-block-paragraph\">X Display Manager Control Protocol (XDMCP) se koristi za kontrolu pristupa u X Display Manageru \u2013 grafi\u010dkom login manageru za sesije na X poslu\u017eitelju. U izvje\u0161taju se nalazi popis ure\u0111aja na kojima je XDMCP javno dostupan na portu 177\/UDP, zbog \u010dega postoji mogu\u0107nost iskori\u0161tavanja istog za zlonamjerne aktivnosti poput amplifikacije DDoS napada.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo da ugasite servis ako ga ne koristite ili ograni\u010dite pristup na poznate ure\u0111aje i\/ili blokirate dolazni promet na portu 177\/UDP.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati XDMCP dostupnost poku\u0161ajte s naredbom \u201cnmap -sU -p 177 \u2013script xdmcp-discover [IP]\u201d.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o XDMCP-u mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/scan.shadowserver.org\/xdmcp\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/scan.shadowserver.org\/xdmcp\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-xdmcp-service-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/accessible-xdmcp-service-report\/<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Ranjivost SSL\/TLS protokola \u2013 \u201cssl-freak\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Factoring RSA Export Keys (FREAK) napad iskori\u0161tava kriptografsku ranjivost u SSL\/TLS protokolima za izvo\u0111enje MiTM (Man in the Middle) napada. U izvje\u0161taju se nalazi popis ure\u0111aja koji su ranjivi na FREAK napad.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo redovito a\u017euriranje SSL\/TLS biblioteka i aplikacija.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o FREAK napadu mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/scan.shadowserver.org\/freak\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/scan.shadowserver.org\/freak\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/ssl-freak-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/ssl-freak-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.kb.cert.org\/vuls\/id\/243585\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.kb.cert.org\/vuls\/id\/243585<\/a><\/li>\n<\/ul>\n<\/details>\n\n\n\n<details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary>Ranjivost SSL protokola \u2013 \u201cssl-poodle\u201d<\/summary>\n<p class=\"wp-block-paragraph\">Padding Oracle On Downgraded Legacy Encryption (POODLE) napad iskori\u0161tava ranjivost prona\u0111enu u SSL 3.0 protokolu za dekripciju i eksfiltraciju podataka unutar sesije. U izvje\u0161taju se nalazi popis ure\u0111aja koji su ranjivi na POODLE napad.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Kako biste se za\u0161titili od takvih napada, savjetujemo potpuno onemogu\u0107avanje SSL 3.0 protokola, ako vam je to prihvatljivo, te implementaciju sigurnijeg TLS protokola.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Ako sami \u017eelite testirati SSLv3 dostupnost poku\u0161ajte s naredbom \u201copenssl s_client -connect [IP]:443 -ssl3\u201d.<\/p>\n\n\n<p class=\"wp-block-paragraph\">Dodatno o POODLE napadu mo\u017eete pro\u010ditati na:<\/p>\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/ssl-poodle-report\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.shadowserver.org\/what-we-do\/network-reporting\/ssl-poodle-report\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/scan.shadowserver.org\/poodle\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/scan.shadowserver.org\/poodle\/<\/a><\/li>\n\n\n<li><a href=\"https:\/\/us-cert.cisa.gov\/ncas\/alerts\/TA14-290A\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/us-cert.cisa.gov\/ncas\/alerts\/TA14-290A<\/a><\/li>\n\n\n<li><a href=\"https:\/\/www.openssl.org\/~bodo\/ssl-poodle.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.openssl.org\/~bodo\/ssl-poodle.pdf<\/a><\/li>\n<\/ul>\n<\/details>\n","protected":false},"excerpt":{"rendered":"<p>Izvje\u0161taj o javno dostupnim servisima koji se mogu iskoristiti za napade, s preporukama kako ih za\u0161tititi.<\/p>","protected":false},"author":3,"featured_media":0,"parent":480,"menu_order":10,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"cert_hero":"","cert_deco":"","footnotes":""},"class_list":["post-482","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages\/482","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=482"}],"version-history":[{"count":2,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages\/482\/revisions"}],"predecessor-version":[{"id":1722,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages\/482\/revisions\/1722"}],"up":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/pages\/480"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=482"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}