Skip to content

Public service exposure

Windows file sharing (SMB) open to the internet

Whether the SMB port (445) used by Windows file sharing accepts a connection from the internet.

Part of the External Security Check. Free during the preview.

What it checks

Whether the SMB port (445) used by Windows file sharing accepts a connection from the internet.

A pass means: Windows file sharing (SMB) is not reachable from the internet.

Possible findings

Windows file sharing reachable from the internet

Severity: HighConfidence: Medium confidenceKind: Security issue

What we found

The SMB port (445) accepted a connection from the internet.

Why it matters

SMB has a long history of serious remote vulnerabilities (including WannaCry) and should never be exposed to the internet.

How to fix it

Block port 445 at your firewall. Use a VPN or a cloud file service for remote access to files.

References