CyberHunter
Local dataset, no network
// Other services

Port 4194: Security Protocol and Data Model

Port 4194 is assigned by IANA to spdm (Security Protocol and Data Model).

4194

How spdm works

Other services
client:4194spdmresponse client:4194spdmresponse

The client sends a request to port 4194 and the spdm service answers.

Transport
TCP
Exposure risk
not rated depends on the program listening
Encryption
Unknownnot stated by the registry
IANA status
Assigned1 registered service
Range
Registered (1024-49151)
01 Security

Is port 4194 dangerous?

We have no specific security note for port 4194. Its risk depends on the program actually listening on it. General advice for other services services:

  • Close the port if nothing on the host needs it.
  • Identify the process that listens on it (commands below) before opening it in a firewall.
  • Expose a service only to the networks that use it.
02 Registry

IANA registry entries for port 4194

ServicePortTransportDescriptionReferenceUpdated
spdm 4194 TCP Security Protocol and Data Model - 2025-05-30
-4194-Reserved--

// source: IANA service name and port number registry

03 Check it

Which program uses port 4194, and is it reachable?

Linux

sudo ss -ltnup 'sport = :4194'      # process listening on 4194
sudo lsof -nP -i :4194

macOS

sudo lsof -nP -i :4194

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 4194 -State Listen | Select LocalAddress, OwningProcess
Get-NetUDPEndpoint -LocalPort 4194
netstat -ano | findstr :4194

From another machine

nmap -p 4194 -sV <host>
nc -zv <host> 4194

Block it in the firewall

sudo ufw deny 4194/tcp                                         # Linux (ufw)
New-NetFirewallRule -DisplayName "Block 4194" -Direction Inbound -LocalPort 4194 -Protocol TCP -Action Block  # Windows
04 FAQ
What is port 4194 used for?

Port 4194 is assigned by IANA to spdm (Security Protocol and Data Model).

Is port 4194 TCP or UDP?

Port 4194 is registered for TCP.

Is it safe to open port 4194?

It depends on the program that listens on it. Open it only for a service you know and only to the networks that need it. Close the port if nothing on the host needs it.

How do I check if port 4194 is open?

On Linux run "ss -ltnup 'sport = :4194'", on macOS "lsof -nP -i :4194", and on Windows "netstat -ano | findstr :4194" to see the local process. From another machine, "nmap -p 4194 <host>" shows whether it is reachable.

05 Related

Latest vulnerability news

All news