CVE-2024-3596
CriticalSummary
The RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
Risk Assessment
An attacker can manipulate RADIUS responses, potentially leading to unauthorized access or denial of access to organizational resources.
Recommendation
It is recommended to update systems using the RADIUS protocol and implement additional security mechanisms to minimize the risk of forgery attacks.
Original NVD description (English source)
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.