If I have a vm with with 2 interfaces, One for public access, One for private access. Both are within the same vnet but in separate subnets.
I have two NSG's one locked down for the public access and attached to the public interface, and one not so locked down for the private interface.
Is there still a risk of external traffic traversing the inbound rules on the ports if they are set to any/any on the private interface?
If so...how?