{
  "port": 27000,
  "protocol": "both",
  "service": "FlexNet Publisher (FlexLM)",
  "oneLiner": "The first of FlexNet Publisher's license-manager ports — the daemon that decides whether your CAD or EDA seat starts.",
  "whatItIs": "IANA reserves 27000-27009 for Flexera as 'flex-lm'. The FlexNet Publisher license server, lmgrd or lmadmin, binds the first free port in that range, which in practice is nearly always 27000, and vendor daemons listen on separate ports alongside it. Clients are configured with 27000@server and check out floating licenses over it, which is why this port turns up on engineering networks running MATLAB, Cadence, Synopsys, Autodesk and similar tools. The `lmutil lmstat` client queries it directly.",
  "exposure": {
    "verdict": "never",
    "note": "The license daemon is unauthenticated by design and has a long history of remote vulnerabilities. Keep it inside the engineering network; never publish it, and firewall the vendor-daemon port too."
  },
  "checkCommand": "lmutil lmstat -a -c 27000@TARGET",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "Revenera FlexNet Licensing (FlexNet Publisher)",
      "url": "https://www.revenera.com/software-monetization/products/software-licensing/flexnet-licensing",
      "kind": "official-docs"
    }
  ]
}