What does a listening network port imply during a security audit?
A service is ready to receive connections, creating exposure whose purpose and necessity should be verified.
Listening sockets have no relationship to attack surface.
The system is certainly compromised whenever any port listens.
The service can make outbound connections but cannot receive any data.