Port 7 Information

Information about Port 7

• Port 7 is used for the echo protocol. It’s purpose was originally for testing and measuring round-trip times in IP networks. It is rarely used for this original purpose, however, it is utilised by magic packets which perform Wake-on LAN to devices accepting WOL datagrams allowing devices to be powered on remotely. The echo service is not enabled by default on UNIX operating systems, however it can be enabled by editing /etc/inetd.conf and restarting inetd.
• Port 7 and specifically Wake-on LAN datagrams have been used by Ryuk malware in order to wake up d evices that have been identified on the victims ARP table, attempt to mount the C$ drive as a networ k file share and encrypt these files. As a result, Wake-on LAN datagrams may be an IOC.
• This page was updated on 2020-12-16.

Description

• Echo

tcp

• echo

udp

• echo
• ryuk

sources

• 22

targets

• 26

CVEs Associated with Port 7

CVE-2018-0409 CVE-2018-10943 CVE-2018-13115 CVE-2018-14324 CVE-2019-10059 CVE-2019-12119 CVE-2019-14951 CVE-2019-18310 CVE-2000-0272 CVE-2001-0952 CVE-2003-0054 CVE-2003-0760 CVE-2003-0939 CVE-2005-1383 CVE-2006-0960 CVE-2009-3744 CVE-2010-0103 CVE-2010-1185 CVE-2013-1111 CVE-2014-0719 CVE-2014-0721 CVE-2015-4852 CVE-2016-10372 CVE-2019-12118 CVE-2019-18311 CVE-2020-27403 CVE-2000-0532 CVE-2001-1356 CVE-2002-1883 CVE-2005-1603 CVE-2005-4587 CVE-2010-5288 CVE-2011-0406 CVE-2013-2571 CVE-2014-5350 CVE-2016-10416 CVE-2017-17933