by Kastro CVE-2024-3596
IETF RFC — RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
Description · from the CVE record
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
Affected
ProductAffectedFixed inSource
RFC2865–CNA
rfc2865–CISA-ADP
CPC80 Central Processing/Communication< V16.51V16.51siemens-SADP
CPCI85 Central Processing/Communication< V6.20V6.20siemens-SADP
POWER METER SICAM Q100 family< V2.70V2.70siemens-SADP
POWER METER SICAM Q200 family< V2.83V2.83siemens-SADP
Powerlink IP< V4.23V4.23siemens-SADP
RUGGEDCOM APE1808all versions–siemens-SADP
RUGGEDCOM APE1808all versions–siemens-SADP
SICAM AK 3see advisory–siemens-SADP
SICAM BCsee advisory–siemens-SADP
SICAM GridEdge (Classic)see advisory–siemens-SADP
Scores by source
CISA ADP9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total