Seems to be a serious problem: http://eecs.umich.edu/eecs/about/articles/2017/open-port-vulnerabilities.html