Port 4194Security Protocol and Data Model (SPDM)
TCP port 4194 is assigned to SPDM, a protocol for authenticating devices, retrieving measurements, and establishing secured sessions.
- transport
- tcp
- in transit
- cleartext
- assignment
- official
- risk
- 2/10
- lookups
- 0
single transport
payload readable on path
registered with iana
safe
rank 993 of 5,109 · top 19%
also known as spdm
Technical Details
what runs on :4194IANA assigns TCP port 4194 to SPDM. SPDM is a binary request/response protocol: peers negotiate versions and capabilities, and can authenticate an endpoint, retrieve measurements, and establish a secured session. Encryption is not automatic for every exchange; it is available after session key establishment. TCP provides the connection, while SPDM supplies the protocol messages. In typical hardware deployments SPDM is carried over device-oriented transports such as MCTP or PCIe DOE, so a TCP listener is more likely in a specialized integration or test setup than on an ordinary server.
Security Information
exposure of :4194risk score
2/ 10safe
routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.
security averages 3.1 across 368 ports — this one sits 1.1 below.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp
every listening transport is another surface to filter at the edge
security overview
This is not a remote shell or a general-purpose management interface, and a deployed responder may expose certificates or device measurements during protocol exchanges. SPDM can establish a secured session, but initial negotiation and authentication exchanges are not necessarily encrypted. Avoid exposing an SPDM responder to the public internet; restrict access to the intended management network and keep its implementation current, since reachable protocol parsers can still present implementation-level attack surface.
Related Ports
the 8 most looked-up other ports in security — 368 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :8881 | Atlasz Secure Server | TCP | Web Services | caution | 67.6k |
| :443 | HTTPS | TCPtls | Web Services | caution | 65.9k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Squid Proxy HTTP | TCP | Web Services | caution | 45.8k |
| :8080 | HTTP Alternate | TCP | Web Services | caution | 44.9k |
| :7000 | Vuze HTTPS Tracker | TCPtls | Security | caution | 28.9k |
risk mix of the 8 listed
- caution100%
2 of 8 encrypted