Vulnerability Details
Severity:
High
Category:
Network
Description
The network lacks proper segmentation between environments with different trust levels, allowing unrestricted communication between systems that should be isolated.
Risks
An attacker who compromises one system could freely move laterally through the network to access sensitive resources, databases, or critical infrastructure without additional barriers.
Remediation
Implement network segmentation using VLANs, subnets, and firewalls. Apply the principle of least privilege to inter-segment communications. Deploy IDS/IPS at segment boundaries. Regularly audit firewall rules and network flows.