Open ports can be exploited by threat actors to breach companies. Reducing the number of open ports is recommended lower the risk.
There are over 65,000 possible ports that could be open. Some of these are commonly used and are required for the normal function of your business.
Sometimes, businesses discover that ports are open that they were not aware of. They may also discover that ports are open that no longer need to be.
Threat actors will scan for open ports and use these to breach companies by spoofing, credential sniffing or exploiting vulnerabilities. Having fewer open ports will reduce the opportunities threat actors have to access your company.
The Orpheus vulnerability score is weighted to reflect the fact that some ports are commonly open.