Security News > 2024 > July > RADIUS Vulnerability

The Blast-RADIUS attack allows a man-in-the-middle attacker between the RADIUS client and server to forge a valid protocol accept message in response to a failed authentication request.

This forgery could give the attacker access to network devices and services without the attacker guessing or brute forcing passwords or shared secrets.

This is one of those vulnerabilities that comes with a cool name, its own website, and a logo.

News URL

https://www.schneier.com/blog/archives/2024/07/radius-vulnerability.html