CVE-2023-3674

Summary

CVE-2023-3674 is a cybersecurity vulnerability affecting the keylime attestation verifier. This issue arises when the verifier fails to identify a faulty device quote, despite an invalid signature. Instead of flagging the device as untrusted, an error message is logged without causing any significant action, potentially leaving the system vulnerable to security threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.