You don't even need a network port open; you might have the vulnerable software already on your system: https://terminal2shell.com/

</s>

I think this can be chained.