Any vulnerabilities in any of your software that can talk to a network, ssh, browser, the operating system itsself could be exploited if your firewall is down

If you’re using username and password and have ssh enabled, for example anyone on your network could attempt to log in to your machine