Description

Detects AWS ElastiCache clusters configured with default ports (11211 for Memcached or 6379 for Redis). Using default ports makes cache instances more predictable targets for attackers and goes against security best practices of port obfuscation.

Detection Strategy

• Scans all ElastiCache clusters in the specified AWS region

• Identifies Memcached engine clusters using port 11211

• Reports a vulnerability when an ElastiCache cluster uses default ports (11211 or 6379)

• Captures both the engine type and port number in the vulnerability report