Description
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
Metrics
CVSS 3.1 9.0/10
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| IETF | RFC | 2865 |
| ietf | rfc | 2865 |
| Siemens | CPC80 Central Processing/Communication | < V16.51 |
| Siemens | CPCI85 Central Processing/Communication | < V6.20 |
| Siemens | POWER METER SICAM Q100 family | < V2.70 |
| Siemens | POWER METER SICAM Q200 family | < V2.83 |
| Siemens | Powerlink IP | < V4.23 |
| Siemens | RUGGEDCOM APE1808 | < * |
| Siemens | RUGGEDCOM APE1808 | < * |
| Siemens | SICAM AK 3 | — |
| Siemens | SICAM BC | — |
| Siemens | SICAM GridEdge (Classic) | — |
| Siemens | SICAM GridEdge Applications for SICAM 8 Platform | — |
| Siemens | SICAM GridPass | < V2.50 |
| Siemens | SICAM TM | — |
| Siemens | SICORE Base system | < V2.20.0 |
| Siemens | SIPROTEC 5 - CP200 Devices | — |
| Siemens | SIPROTEC 5 6MD84 (CP300) | < V10.0 |
| Siemens | SIPROTEC 5 6MD85 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 6MD86 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 6MD89 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 6MD89 (CP300) V9.6x | < V9.68 |
| Siemens | SIPROTEC 5 6MU85 (CP300) | < V10.0 |
| Siemens | SIPROTEC 5 7KE85 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 7SA82 (CP100) | >= V7.80, < V8.90 |
| Siemens | SIPROTEC 5 7SA82 (CP150) | < V10.0 |
| Siemens | SIPROTEC 5 7SA86 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 7SA87 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 7SD82 (CP100) | >= V7.80, < V8.90 |
| Siemens | SIPROTEC 5 7SD82 (CP150) | < V10.0 |
| Siemens | SIPROTEC 5 7SD86 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 7SD87 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 7SJ81 (CP100) | >= V7.80, < V8.90 |
| Siemens | SIPROTEC 5 7SJ81 (CP150) | < V10.0 |
| Siemens | SIPROTEC 5 7SJ82 (CP100) | >= V7.80, < V8.90 |
| Siemens | SIPROTEC 5 7SJ82 (CP150) | < V10.0 |
| Siemens | SIPROTEC 5 7SJ85 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 7SJ86 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 7SK82 (CP100) | >= V7.80, < V8.90 |
| Siemens | SIPROTEC 5 7SK82 (CP150) | < V10.0 |
| Siemens | SIPROTEC 5 7SK85 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 7SL82 (CP100) | >= V7.80, < V8.90 |
| Siemens | SIPROTEC 5 7SL82 (CP150) | < V10.0 |
| Siemens | SIPROTEC 5 7SL86 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 7SL87 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 7SS85 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 7ST85 (CP300) | >= V7.80, < V10.0 |
| Siemens | SIPROTEC 5 7ST85 (CP300) V9.6x | < V9.68 |
| Siemens | SIPROTEC 5 7ST86 (CP300) | < V10.0 |
| Siemens | SIPROTEC 5 7ST86 (CP300) V9.8x | < V9.83 |
References
- http://www.openwall.com/lists/oss-security/2024/07/09/4Mailing List
- https://cert-portal.siemens.com/productcert/html/ssa-723487.html
- https://cert-portal.siemens.com/productcert/html/ssa-794185.html
- https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/Technical Description
- https://datatracker.ietf.org/doc/html/rfc2865Technical Description
- https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdfThird Party Advisory
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014Third Party Advisory
- https://www.blastradius.fail/Technical Description
- http://www.openwall.com/lists/oss-security/2024/07/09/4Mailing List
- https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/Technical Description
- https://datatracker.ietf.org/doc/html/rfc2865Technical Description
- https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdfThird Party Advisory
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014Third Party Advisory
- https://security.netapp.com/advisory/ntap-20240822-0001/Third Party Advisory
- https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocolThird Party Advisory
- https://www.blastradius.fail/Technical Description
- https://www.kb.cert.org/vuls/id/456537
- https://cert-portal.siemens.com/productcert/html/ssa-364175.html
- https://cert-portal.siemens.com/productcert/html/ssa-723487.html
- https://cert-portal.siemens.com/productcert/html/ssa-770770.html
- https://cert-portal.siemens.com/productcert/html/ssa-794185.html
Timeline
- Published
- Jul 9, 2024
- Last modified
- Oct 15, 2026
- NVD status
- Modified