DMTF-2023-0001: SPDM mutual authentication bypass
CVE-2023-31127

9.1CRITICAL

Key Information:

Vendor

Dmtf

Status
Libspdm
Vendor
CVE Published:
8 May 2023

What is CVE-2023-31127?

A vulnerability exists in the SPDM session establishment process of libspdm prior to version 2.3.1 that allows an attacker to bypass mutual authentication. This could occur when a device begins a session using the DHE method but completes it with the PSK method, exploiting a flaw in the session hash verification. Affected SPDM responders supporting both Key Exchange and PSK capabilities while requiring mutual authentication are at risk. Versions 1.0 to 2.3 are impacted, but a patch may be released in libspdm version 2.3.2.

Affected Version(s)

libspdm < 2.3.2

References

https://github.com/DMTF/libspdm/security/advisories/GHSA-...
x_refsource_CONFIRM
https://github.com/DMTF/libspdm/pull/2006
x_refsource_MISC
https://github.com/DMTF/libspdm/pull/2007
x_refsource_MISC

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.