A research team led by University of California San Diego computer scientists investigated the Remote Authentication Dial-In User Service (RADIUS) protocol and found a vulnerability they call Blast-RADIUS...

Take action: Time to start reviewing your RADIUS implementation in Cisco devices. If any RADIUS authentication is internet accessible, either move it to TLS/TCP or patch your systems. Ideally, the patching is the better long term approach since it doesn't slow down RADIUS by moving it to TCP protocol. But since patching is not an easy process, this is a team decision. Learn More Cisco is reporing that a number of their products are vulnerable to a vulnerability in the Remote Authentication Dial-In User Service (RADIUS) protocol, tracked as CVE-2024-3596 (CVSS score 9.0) . Known as " BlastRADIUS ," this vulnerability allows an on-path attacker to forge RADIUS responses, potentially leading to unauthorized access to network resources. Cisco has identified several vulnerable products across various categories: Several Cisco products are confirmed not to be affected, including certain wireless access points, DNA Spaces Connector, and UCS B-Series Blade Servers. Full advisory details here Cisco recommends the following measures to protect against this vulnerability: Use TLS or DTLS Encryption: Configure RADIUS clients and servers to use DTLS or TLS over TCP to prevent exploitation. Network Isolation: Isolate RADIUS resources from untrusted sources using secure VPN tunnels and network segmentation. Software Updates: Regularly check for and apply software updates and patches. There are no workarounds available for this vulnerability. Cisco urges network administrators to review their RADIUS configurations and apply recommended mitigations promptly. Cisco's Product Security Incident Response Team (PSIRT) is actively investigating the impact on its product line and has acknowledged the existence of proof-of-concept exploit code. However, there are no reports of malicious exploitation in the wild as of now.

Das Sommerloch hält immer wieder Überraschungen bereit. Dieses Mal haben einige Sicherheitsforscher unser geliebtes RADIUS-Protokoll unter die Lupe genommen und Schwachstellen entdeckt. Wir greifen da...

Researchers warn that BlastRADIUS, a flaw in the RADIUS network authentication protocol helps hackers conduct Man-in-the-middle (MitM) attacks.

MD5 MITM Muddle: Ancient, widely used protocol has CVSS 9.0 vulnerability.

Ubiquitous RADIUS scheme uses homegrown authentication based on MD5. Yup, you heard right.