RADIUS Protocol Vulnerability Exposes Networks to MitM Attacks

Researchers disclosed "BlastRADIUS" (CVE-2024-3596), a critical protocol design flaw in RADIUS that leverages MD5 collision attacks to allow an attacker with access to RADIUS/UDP traffic to forge authentication responses, potentially granting unauthorized administrative access and arbitrary authorizations; the issue affects standards-compliant RADIUS implementations (notably PAP, CHAP, MS-CHAPv2) but can be mitigated by TLS/IPSec, enforcing Message-Authenticator, or using 802.1X, and there is no evidence of active exploitation at the time of the report.