Help Net Security

Critical vulnerability in the RADIUS protocol leaves networking equipment open to attack

A new critical security vulnerability in the RADIUS protocol, dubbed BlastRADIUS (CVE-2024-3596), leaves most networking equipment open to Man-in-the-Middle (MitM) attacks. While the vulnerability can ...
Hosted on MSN

RADIUS networking protocol blasted into submission through MD5-based flaw

If someone can do a little MITM'ing and hash cracking, they can log in with no valid password needed Cybersecurity experts at universities and Big Tech have disclosed a vulnerability in a common ...
CSOonline

MD5 attack puts RADIUS networks everywhere at risk

A design flaw in the decades-old RADIUS authentication protocol allows attackers to take over network devices from a man-in-the-middle position by exploiting MD5 hash collisions. The “secure enough” ...
techtarget

RADIUS (Remote Authentication Dial-In User Service)

What is RADIUS (Remote Authentication Dial-In User Service)? RADIUS (Remote Authentication Dial-In User Service) is a client-server protocol and software that enables remote access servers to ...
Network World

The perfect certificate migration until it wasn’t: How certificates can break RADIUS trusts

RADIUS didn’t fail — certificate trust did, proving one forgotten root CA can bring modern network access to a full stop. Anyone who’s spent time in networking knows the familiar world of RADIUS ...