CyberSecBulletin

DMTF vulnerabilities

We track 2 vulnerabilities in DMTF products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 1, 2023.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest DMTF vulnerabilities

  • 7.5 High severity

    libspdm is a sample implementation that follows the DMTF SPDM specifications.

    CVE-2023-32690DMTF

    libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without validation. If the Reque

  • 8.8 High severity

    libspdm: Improper Authentication

    CVE-2023-31127DMTF

    libspdm is a sample implementation that follows the DMTF SPDM specifications. A vulnerability has been identified in SPDM session establishment in libspdm prior to version 2.3.1. If a device supports both DHE session and PSK session with mutual authentication,