Justifcation for Nmap Port Numbers about cve-2023-33246_rocketmq_rce_exploit HOT 4 CLOSED

These ports, 11911, 12911, and 13911, are similar to the top open ports found by nmap, but they are most commonly used by RocketMQ. I discovered these ports when setting up the RocketMQ environment. Typically, services exposed to the internet have a high probability of changing their default ports. Given the serious nature of this vulnerability, and the fact that it has been disclosed for some time now, I estimate that most of them have either been fixed or access control has been implemented on these ports.

from cve-2023-33246_rocketmq_rce_exploit.

Thanks for the information. Do you know what components of RocketMQ use those ports (11911, 12911, and 13911)? Like the controller, broker, nameserver, or something else?

from cve-2023-33246_rocketmq_rce_exploit.

I believe it would be better for you to check this information on the RocketMQ official website.
The ports that I've collected are just the ones that I've seen.

from cve-2023-33246_rocketmq_rce_exploit.

Will do, thanks for the help!

from cve-2023-33246_rocketmq_rce_exploit.