05-01-2020 03:14 PM
Let me understand your question,
Allow anyone from Internet able to connect to a system listen on Remote Desktop protocol on your network? Is that what you are asking?
1. How update is the system patch level?
2. There could be a chance of non-publicly disclosure bugs on RDP can use a backdoor (also known as 0 days attack, which I disagree with that term).
3. How is the password complexity and length? Does it require multi factor authentication? Is it a client cert based login authentication?
4. If I am able to login to that host, is that system part of Corp Active Directory? How secured is the AD admin accounts?
and more and more...
