logo

Database

Aws Unrestricted Cidrs

Description

Detects AWS EC2 security groups configured with overly permissive inbound rules that allow access from any IP address. Security groups with rules containing '0.0.0.0/0' (IPv4) or '::/0' (IPv6) CIDR ranges represent a security risk as they allow unrestricted network access from the internet.

Detection Strategy

    Security group contains at least one inbound rule with source CIDR '0.0.0.0/0' in IPv4 rules

    Security group contains at least one inbound rule with source CIDR '::/0' in IPv6 rules

    Each unrestricted CIDR rule in the security group will generate a separate vulnerability report