무엇인가
SNMP·Syslog·Prometheus·Grafana 등 관측·관리 UI 포트입니다.
왜 위험한가
SNMP(community)·대시보드가 노출되면 인프라 지도·자격증명이 새고, 증폭 DDoS 에도 악용됩니다.
어떻게 해야 하나
SNMPv3·인증을 쓰고, 관측 포트/UI 를 내부망·인증 뒤로 두세요.
내 서버에서 열려 있는지 확인
Linux
ss -ltnp 'sport = :9090'Cockpit / Prometheus 의 알려진 취약점
| CVE | 제목 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|
| CVE-2023-4195 | PHP Remote File Inclusion in cockpit-hq/cockpit | 9.9 | — | 2023-08-07 | |
| CVE-2026-38992 | Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple... | 9.8 | — | 2026-04-29 | |
| CVE-2022-2818 | Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit | 9.8 | — | 2022-08-15 | |
| CVE-2026-72557 | Cockpit CMS Cockpit CMS - Unrestricted File Upload | 8.8 | — | 2026-08-11 | |
| CVE-2026-38991 | Cockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component _isFileTypeAllowed fu... | 8.8 | — | 2026-04-29 | |
| CVE-2026-57855 | Cockpit CMS Missing Authorization in Bucket File Storage API | 8.7 | — | 2026-07-14 | |
| CVE-2026-57856 | Cockpit CMS Path Traversal via Bucket Name in Bucket File Storage API | 8.7 | — | 2026-07-14 | |
| CVE-2026-73680 | Cockpit CMS 2.14.0 Authenticated Command Injection via FFmpeg Filename | 8.7 | — | 2026-08-15 | |
| CVE-2025-1025 | Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitrary File Upload where an attac... | 8.7 | — | 2025-02-05 | |
| CVE-2022-2713 | Insufficient Session Expiration in cockpit-hq/cockpit | 8.6 | — | 2022-08-08 | |
| CVE-2023-4432 | Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit | 8.3 | — | 2023-08-19 | |
| CVE-2023-4321 | Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit | 8.3 | — | 2023-08-14 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.