securing an internet-facing router

[m.fera001]

I have a router that I use for internet access, outbound only, there is nat overload on the outside interface.

I have physical access on the console of the router, so I have disabled all kind of access on the vty lines, and all other services listening on the device

Is it still possible to exploit some kind of vulnerability or having closed all the ports on the managment plane the router is unhackable?

[Yunus Emre DEV]

access restrictions and port restrictions
you can add port list in the internet rules

in nat rules coming in from outside
to serve your outsider
wan by adding ip addresses
can provide