Skip to content
Fencer Vulns
critical 9.0

CVE-2024-3596 in the critical feed json

RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

published 2024-07-09 2 y ago modified 2026-10-15 25 d ago also EUVD-2024-32175

cvss
9.0
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
14.9%
EPSS 14.9% chance of exploitation in 30 days, percentile 96%
public exploits
0
none known

Summary

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.

Patch / fix

  • Siemens CPC80 Central Processing/Communication V16.51
  • Siemens CPCI85 Central Processing/Communication V6.20
  • Siemens POWER METER SICAM Q100 family V2.70
  • Siemens POWER METER SICAM Q200 family V2.83
  • Siemens Powerlink IP V4.23
  • Siemens SICAM GridPass V2.50
  • Siemens SICORE Base system V2.20.0
  • Siemens SIPROTEC 5 6MD84 (CP300) V10.0
  • Siemens SIPROTEC 5 6MD85 (CP300) V10.0
  • Siemens SIPROTEC 5 6MD86 (CP300) V10.0
  • Siemens SIPROTEC 5 6MD89 (CP300) V10.0
  • Siemens SIPROTEC 5 6MD89 (CP300) V9.6x V9.68
  • Siemens SIPROTEC 5 6MU85 (CP300) V10.0
  • Siemens SIPROTEC 5 7KE85 (CP300) V10.0
  • Siemens SIPROTEC 5 7SA82 (CP100) V8.90
  • Siemens SIPROTEC 5 7SA82 (CP150) V10.0
  • Siemens SIPROTEC 5 7SA86 (CP300) V10.0
  • Siemens SIPROTEC 5 7SA87 (CP300) V10.0
  • Siemens SIPROTEC 5 7SD82 (CP100) V8.90
  • Siemens SIPROTEC 5 7SD82 (CP150) V10.0
  • Siemens SIPROTEC 5 7SD86 (CP300) V10.0
  • Siemens SIPROTEC 5 7SD87 (CP300) V10.0
  • Siemens SIPROTEC 5 7SJ81 (CP100) V8.90
  • Siemens SIPROTEC 5 7SJ81 (CP150) V10.0
  • Siemens SIPROTEC 5 7SJ82 (CP100) V8.90
  • Siemens SIPROTEC 5 7SJ82 (CP150) V10.0
  • Siemens SIPROTEC 5 7SJ85 (CP300) V10.0
  • Siemens SIPROTEC 5 7SJ86 (CP300) V10.0
  • Siemens SIPROTEC 5 7SK82 (CP100) V8.90
  • Siemens SIPROTEC 5 7SK82 (CP150) V10.0
  • freeradius Debian 14, Debian 13 3.2.5+dfsg-1

debian advisories DEBIAN-CVE-2024-3596

  • krb5 Ubuntu 20.04 LTS 1.17-6ubuntu4.8
  • krb5 Ubuntu 22.04 LTS 1.19.2-2ubuntu0.5
  • krb5 Ubuntu 24.04 LTS 1.20.1-6ubuntu2.3
  • freeradius Ubuntu 20.04 LTS 3.0.20+dfsg-3ubuntu0.4
  • freeradius Ubuntu 22.04 LTS 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3
  • freeradius Ubuntu 24.04 LTS 3.2.5+dfsg-3~ubuntu24.04.1
  • krb5 Ubuntu Pro 14.04 LTS 1.12+dfsg-2ubuntu5.4+esm6
  • krb5 Ubuntu Pro 16.04 LTS 1.13.2+dfsg-5ubuntu2.2+esm6

ubuntu advisories UBUNTU-CVE-2024-3596

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • krb5 RHEL 9 1.21.1-4.el9_5
  • libkadm5 RHEL 9 1.21.1-4.el9_5
  • krb5-libs RHEL 9 1.21.1-4.el9_5
  • krb5-pkinit RHEL 9 1.21.1-4.el9_5
  • krb5-server RHEL 9 1.21.1-4.el9_5
  • krb5-server-ldap RHEL 9 1.21.1-4.el9_5
  • krb5-workstation RHEL 9 1.21.1-4.el9_5
  • krb5 RHEL 8 1.18.2-30.el8_10

red hat advisories RHSA-2024:9547RHSA-2024:9474RHSA-2024:8860RHSA-2024:8788RHSA-2024:8792RHSA-2024:8794

  • freeradius-server SLES for SAP 15 SP3, SLES for SAP 15 SP2, SLES 15 SP3-LTSS +4 more 3.0.21-150200.3.15.1
  • freeradius-server SLES for SAP 15 SP4, SLES 15 SP4-LTSS, SLE Module for Server Applications 15 SP5 +5 more 3.0.25-150400.4.7.1
  • freeradius-server SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 3.0.19-3.15.1
  • freeradius-server SLE Module for Server Applications 15 SP6, openSUSE Leap 15.6 3.2.4-150600.3.3.2

suse advisories SUSE-SU-2024:2367-1SUSE-SU-2024:2366-1SUSE-SU-2024:2361-1SUSE-SU-2024:2359-1

  • radcli openSUSE Tumbleweed 1.5.0-1.1

opensuse advisories openSUSE-SU-2026:10528-1

  • libkadm5 AlmaLinux 9 1.21.1-4.el9_5
  • krb5-libs AlmaLinux 9 1.21.1-4.el9_5
  • krb5-pkinit AlmaLinux 9 1.21.1-4.el9_5
  • krb5-server AlmaLinux 9 1.21.1-4.el9_5
  • krb5-server-ldap AlmaLinux 9 1.21.1-4.el9_5
  • krb5-workstation AlmaLinux 9 1.21.1-4.el9_5
  • libkadm5 AlmaLinux 8 1.18.2-30.el8_10
  • krb5-libs AlmaLinux 8 1.18.2-30.el8_10

almalinux advisories ALSA-2024:9474ALSA-2024:8860ALSA-2024:4935ALSA-2024:4936

  • krb5 Rocky Linux 9 1.21.1-4.el9_5
  • krb5 Rocky Linux 8 1.18.2-30.el8_10
  • freeradius Rocky Linux 9 3.0.21-40.el9_4
  • freeradius Rocky Linux 8 3.0.20-15.module+el8.10.0+1841+f214069a

rocky linux advisories RLSA-2024:9474RLSA-2024:8860RLSA-2024:4935RLSA-2024:4936

  • freeradius Alpine 3.24, Alpine 3.23, Alpine 3.22 +4 more 3.0.27-r0

alpine advisories ALPINE-CVE-2024-3596

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-3596 updated cvss 9.0

freeradius: forgery attack

  • Red Hat Enterprise Linux 6 freeradius, freeradius-krb5, freeradius-ldap, freeradius-perl, freeradius-mysql, freeradius-utils, +3 more
    affected: workaround, no fix planned “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.”
  • Red Hat CodeReady Linux Builder EUS (v.9.2) freeradius-perl 3.0.21-38.el9_2.2, freeradius-rest 3.0.21-38.el9_2.2, freeradius-mysql 3.0.21-38.el9_2.2, freeradius-sqlite 3.0.21-38.el9_2.2, freeradius-unixODBC 3.0.21-38.el9_2.2, freeradius-postgresql 3.0.21-38.el9_2.2
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4828
  • Red Hat Enterprise Linux AppStream (v. 8) freeradius 3.0.20-15.module+el8.10.0+22065+aa3d48ca, freeradius-krb5 3.0.20-15.module+el8.10.0+22065+aa3d48ca, freeradius-ldap 3.0.20-15.module+el8.10.0+22065+aa3d48ca, freeradius-perl 3.0.20-15.module+el8.10.0+22065+aa3d48ca, freeradius-rest 3.0.20-15.module+el8.10.0+22065+aa3d48ca, freeradius-mysql 3.0.20-15.module+el8.10.0+22065+aa3d48ca, +5 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4936
  • Red Hat Enterprise Linux AppStream (v. 9) freeradius 3.0.21-40.el9_4, freeradius-krb5 3.0.21-40.el9_4, freeradius-ldap 3.0.21-40.el9_4, freeradius-utils 3.0.21-40.el9_4, python3-freeradius 3.0.21-40.el9_4
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4935
  • Red Hat Enterprise Linux AppStream AUS (v. 8.2) freeradius 3.0.20-1.module+el8.2.0+22148+b45f7ef2.1, freeradius-krb5 3.0.20-1.module+el8.2.0+22148+b45f7ef2.1, freeradius-ldap 3.0.20-1.module+el8.2.0+22148+b45f7ef2.1, freeradius-perl 3.0.20-1.module+el8.2.0+22148+b45f7ef2.1, freeradius-rest 3.0.20-1.module+el8.2.0+22148+b45f7ef2.1, freeradius-mysql 3.0.20-1.module+el8.2.0+22148+b45f7ef2.1, +4 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4913
  • Red Hat Enterprise Linux AppStream AUS (v.8.4) freeradius 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-krb5 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-ldap 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-perl 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-rest 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-mysql 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, +5 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4874
  • Red Hat Enterprise Linux AppStream AUS (v.8.6) freeradius 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-krb5 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-ldap 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-perl 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-rest 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-mysql 3.0.20-12.module+el8.6.0+22086+569c8c49.1, +5 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4826
  • Red Hat Enterprise Linux AppStream E4S (v.8.4) freeradius 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-krb5 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-ldap 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-perl 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-rest 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-mysql 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, +5 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4874
show 24 more
  • Red Hat Enterprise Linux AppStream E4S (v.8.6) freeradius 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-krb5 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-ldap 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-perl 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-rest 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-mysql 3.0.20-12.module+el8.6.0+22086+569c8c49.1, +5 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4826
  • Red Hat Enterprise Linux AppStream E4S (v.9.0) freeradius 3.0.21-26.el9_0.1, freeradius-krb5 3.0.21-26.el9_0.1, freeradius-ldap 3.0.21-26.el9_0.1, freeradius-utils 3.0.21-26.el9_0.1, python3-freeradius 3.0.21-26.el9_0.1
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4912
  • Red Hat Enterprise Linux AppStream EUS (v.8.8) freeradius 3.0.20-14.module+el8.8.0+22090+a01d0e6a.1, freeradius-krb5 3.0.20-14.module+el8.8.0+22090+a01d0e6a.1, freeradius-ldap 3.0.20-14.module+el8.8.0+22090+a01d0e6a.1, freeradius-perl 3.0.20-14.module+el8.8.0+22090+a01d0e6a.1, freeradius-rest 3.0.20-14.module+el8.8.0+22090+a01d0e6a.1, freeradius-mysql 3.0.20-14.module+el8.8.0+22090+a01d0e6a.1, +5 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4829
  • Red Hat Enterprise Linux AppStream EUS (v.9.2) freeradius 3.0.21-38.el9_2.2, freeradius-krb5 3.0.21-38.el9_2.2, freeradius-ldap 3.0.21-38.el9_2.2, freeradius-utils 3.0.21-38.el9_2.2, python3-freeradius 3.0.21-38.el9_2.2
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4828
  • Red Hat Enterprise Linux AppStream EUS (v.9.4) krb5-devel 1.21.1-2.el9_4.1, krb5-debuginfo 1.21.1-2.el9_4.1, krb5-debugsource 1.21.1-2.el9_4.1, libkadm5-debuginfo 1.21.1-2.el9_4.1, krb5-libs-debuginfo 1.21.1-2.el9_4.1, krb5-pkinit-debuginfo 1.21.1-2.el9_4.1, +3 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:9547
  • Red Hat Enterprise Linux AppStream TUS (v.8.4) freeradius 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-krb5 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-ldap 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-perl 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-rest 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, freeradius-mysql 3.0.20-4.module+el8.4.0+22088+2692c5cc.1, +5 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4874
  • Red Hat Enterprise Linux AppStream TUS (v.8.6) freeradius 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-krb5 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-ldap 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-perl 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-rest 3.0.20-12.module+el8.6.0+22086+569c8c49.1, freeradius-mysql 3.0.20-12.module+el8.6.0+22086+569c8c49.1, +5 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4826
  • Red Hat Enterprise Linux BaseOS (v. 8) krb5 1.18.2-30.el8_10, libkadm5 1.18.2-30.el8_10, krb5-libs 1.18.2-30.el8_10, krb5-pkinit 1.18.2-30.el8_10, krb5-server 1.18.2-30.el8_10, krb5-server-ldap 1.18.2-30.el8_10, +1 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:8860
  • Red Hat Enterprise Linux BaseOS (v. 9) krb5 1.21.1-4.el9_5, libkadm5 1.21.1-4.el9_5, krb5-libs 1.21.1-4.el9_5, krb5-pkinit 1.21.1-4.el9_5, krb5-server 1.21.1-4.el9_5, krb5-server-ldap 1.21.1-4.el9_5, +1 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:9474
  • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) krb5 1.17-19.el8_2.2, libkadm5 1.17-19.el8_2.2, krb5-libs 1.17-19.el8_2.2, krb5-pkinit 1.17-19.el8_2.2, krb5-server 1.17-19.el8_2.2, krb5-server-ldap 1.17-19.el8_2.2, +1 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:8789
  • Red Hat Enterprise Linux BaseOS AUS (v.8.4) krb5 1.18.2-9.el8_4.2, libkadm5 1.18.2-9.el8_4.2, krb5-libs 1.18.2-9.el8_4.2, krb5-pkinit 1.18.2-9.el8_4.2, krb5-server 1.18.2-9.el8_4.2, krb5-server-ldap 1.18.2-9.el8_4.2, +1 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:8791
  • Red Hat Enterprise Linux BaseOS AUS (v.8.6) krb5 1.18.2-16.el8_6.2, libkadm5 1.18.2-16.el8_6.2, krb5-libs 1.18.2-16.el8_6.2, krb5-pkinit 1.18.2-16.el8_6.2, krb5-server 1.18.2-16.el8_6.2, krb5-server-ldap 1.18.2-16.el8_6.2, +1 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:8794
  • Red Hat Enterprise Linux BaseOS E4S (v.8.4) krb5 1.18.2-9.el8_4.2, libkadm5 1.18.2-9.el8_4.2, krb5-libs 1.18.2-9.el8_4.2, krb5-pkinit 1.18.2-9.el8_4.2, krb5-server 1.18.2-9.el8_4.2, krb5-server-ldap 1.18.2-9.el8_4.2, +1 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:8791
  • Red Hat Enterprise Linux BaseOS E4S (v.8.6) krb5 1.18.2-16.el8_6.2, libkadm5 1.18.2-16.el8_6.2, krb5-libs 1.18.2-16.el8_6.2, krb5-pkinit 1.18.2-16.el8_6.2, krb5-server 1.18.2-16.el8_6.2, krb5-server-ldap 1.18.2-16.el8_6.2, +1 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:8794
  • Red Hat Enterprise Linux BaseOS E4S (v.9.0) krb5 1.19.1-16.el9_0.2, libkadm5 1.19.1-16.el9_0.2, krb5-libs 1.19.1-16.el9_0.2, krb5-pkinit 1.19.1-16.el9_0.2, krb5-server 1.19.1-16.el9_0.2, krb5-server-ldap 1.19.1-16.el9_0.2, +1 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:8577
  • Red Hat Enterprise Linux BaseOS EUS (v.8.8) krb5 1.18.2-26.el8_8.3, libkadm5 1.18.2-26.el8_8.3, krb5-libs 1.18.2-26.el8_8.3, krb5-pkinit 1.18.2-26.el8_8.3, krb5-server 1.18.2-26.el8_8.3, krb5-server-ldap 1.18.2-26.el8_8.3, +1 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:8792
  • Red Hat Enterprise Linux BaseOS EUS (v.9.2) krb5 1.20.1-9.el9_2.2, libkadm5 1.20.1-9.el9_2.2, krb5-libs 1.20.1-9.el9_2.2, krb5-pkinit 1.20.1-9.el9_2.2, krb5-server 1.20.1-9.el9_2.2, krb5-server-ldap 1.20.1-9.el9_2.2, +1 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:8461
  • Red Hat Enterprise Linux BaseOS EUS (v.9.4) krb5 1.21.1-2.el9_4.1, libkadm5 1.21.1-2.el9_4.1, krb5-libs 1.21.1-2.el9_4.1, krb5-pkinit 1.21.1-2.el9_4.1, krb5-server 1.21.1-2.el9_4.1, krb5-server-ldap 1.21.1-2.el9_4.1, +1 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:9547
  • Red Hat Enterprise Linux BaseOS TUS (v.8.4) krb5 1.18.2-9.el8_4.2, libkadm5 1.18.2-9.el8_4.2, krb5-libs 1.18.2-9.el8_4.2, krb5-pkinit 1.18.2-9.el8_4.2, krb5-server 1.18.2-9.el8_4.2, krb5-server-ldap 1.18.2-9.el8_4.2, +1 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:8791
  • Red Hat Enterprise Linux BaseOS TUS (v.8.6) krb5 1.18.2-16.el8_6.2, libkadm5 1.18.2-16.el8_6.2, krb5-libs 1.18.2-16.el8_6.2, krb5-pkinit 1.18.2-16.el8_6.2, krb5-server 1.18.2-16.el8_6.2, krb5-server-ldap 1.18.2-16.el8_6.2, +1 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:8794
  • Red Hat Enterprise Linux CRB (v. 9) freeradius-perl 3.0.21-40.el9_4, freeradius-rest 3.0.21-40.el9_4, freeradius-mysql 3.0.21-40.el9_4, freeradius-sqlite 3.0.21-40.el9_4, freeradius-unixODBC 3.0.21-40.el9_4, freeradius-postgresql 3.0.21-40.el9_4
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4935
  • Red Hat Enterprise Linux Server (v. 7 ELS) krb5 1.15.1-55.el7_9.3, libkadm5 1.15.1-55.el7_9.3, freeradius 3.0.20-1.el7_9.1, krb5-libs 1.15.1-55.el7_9.3, krb5-pkinit 1.15.1-55.el7_9.3, krb5-server 1.15.1-55.el7_9.3, +2 more Red Hat Enterprise Linux Server Optional (v. 7 ELS) freeradius-krb5 3.0.20-1.el7_9.1, freeradius-ldap 3.0.20-1.el7_9.1, freeradius-perl 3.0.20-1.el7_9.1, freeradius-mysql 3.0.20-1.el7_9.1, freeradius-utils 3.0.20-1.el7_9.1, freeradius-python 3.0.20-1.el7_9.1, +3 more
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:4911
  • Red Hat OpenShift AI 2.16 rhoai v2.16.0-1732953706
    fixed: vendor fix “Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.” RHSA-2024:10852
  • Red Hat OpenShift AI 2.16 rhoai v2.16.0-1732898906, rhoai v2.16.0-1732899102, rhoai v2.16.0-1732953706, rhoai v2.16.0-1732953738, rhoai v2.16.0-1732953753, rhoai v2.16.0-1732953768, +15 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-24-193-05 updated cvss 9.0

Siemens SCALANCE, RUGGEDCOM, SIPLUS, and SINEC

  • Siemens RUGGEDCOM CROSSBOW < 5.6
    affected: fixed in V5.6, mitigation support.industry.siemens.com
  • Siemens RUGGEDCOM i800 < 4.3.11 Siemens RUGGEDCOM i800NC < 4.3.11 Siemens RUGGEDCOM i801 < 4.3.11 Siemens RUGGEDCOM i801NC < 4.3.11 Siemens RUGGEDCOM i802 < 4.3.11 Siemens RUGGEDCOM i802NC < 4.3.11
    +8 more products
    Siemens RUGGEDCOM i803 < 4.3.11 Siemens RUGGEDCOM i803NC < 4.3.11 Siemens RUGGEDCOM M969 < 4.3.11 Siemens RUGGEDCOM M969NC < 4.3.11 Siemens RUGGEDCOM M2100 < 4.3.11 Siemens RUGGEDCOM M2100NC < 4.3.11 Siemens RUGGEDCOM M2200 < 4.3.11 Siemens RUGGEDCOM M2200NC < 4.3.11
    affected: fixed in V4.3.11, mitigation support.industry.siemens.com
  • Siemens RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) < 8.2 Siemens RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) < 8.2
    affected: fixed in V8.2, mitigation support.industry.siemens.com
  • Siemens RUGGEDCOM RMC30 < 4.3.11 Siemens RUGGEDCOM RMC30NC < 4.3.11 Siemens RUGGEDCOM RMC8388 V4.X < 4.3.11
    affected: fixed in V4.3.11, mitigation support.industry.siemens.com
  • Siemens RUGGEDCOM RMC8388 V5.X < 5.10.0
    affected: fixed in V5.10.0, mitigation support.industry.siemens.com
  • Siemens RUGGEDCOM RMC8388NC V4.X < 4.3.11
    affected: fixed in V4.3.11, mitigation support.industry.siemens.com
  • Siemens RUGGEDCOM RMC8388NC V5.X < 5.10.0
    affected: fixed in V5.10.0, mitigation support.industry.siemens.com
  • Siemens RUGGEDCOM ROX MX5000 < 2.17.0 Siemens RUGGEDCOM ROX MX5000RE < 2.17.0 Siemens RUGGEDCOM ROX RX1400 < 2.17.0 Siemens RUGGEDCOM ROX RX1500 < 2.17.0 Siemens RUGGEDCOM ROX RX1501 < 2.17.0 Siemens RUGGEDCOM ROX RX1510 < 2.17.0
    +5 more products
    Siemens RUGGEDCOM ROX RX1511 < 2.17.0 Siemens RUGGEDCOM ROX RX1512 < 2.17.0 Siemens RUGGEDCOM ROX RX1524 < 2.17.0 Siemens RUGGEDCOM ROX RX1536 < 2.17.0 Siemens RUGGEDCOM ROX RX5000 < 2.17.0
    affected: fixed in V2.17.0, mitigation support.industry.siemens.com
show 1 more
  • Siemens RUGGEDCOM RP110 < 4.3.11 Siemens RUGGEDCOM RP110NC < 4.3.11 Siemens RUGGEDCOM RS400 < 4.3.11 Siemens RUGGEDCOM RS400NC < 4.3.11 Siemens RUGGEDCOM RS401 < 4.3.11 Siemens RUGGEDCOM RS401NC < 4.3.11
    affected: fixed in V4.3.11, mitigation support.industry.siemens.com

457 more affected in the full advisory

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-25-135-05 updated cvss 9.0

Siemens SIPROTEC and SICAM

  • Siemens CPC80 Central Processing/Communication < 16.51
    affected: fixed in V16.51, mitigation
  • Siemens CPCI85 Central Processing/Communication < 6.20
    affected: fixed in V6.20, mitigation
  • Siemens POWER METER SICAM Q100 family < 2.70
    affected: fixed in V2.70, mitigation support.industry.siemens.com
  • Siemens POWER METER SICAM Q200 family < 2.83
    affected: fixed in V2.83, mitigation support.industry.siemens.com
  • Siemens Powerlink IP < 4.22
    affected: fixed in V4.22, mitigation support.industry.siemens.com
  • Siemens SICAM GridPass < 2.50
    affected: fixed in V2.50, mitigation support.industry.siemens.com
  • Siemens SICORE Base system < 2.20.0
    affected: fixed in V2.20.0, mitigation
  • Siemens SIPROTEC 5 6MD84 (CP300) < 10.0 Siemens SIPROTEC 5 6MD85 (CP300) >= 7.80, < 10.0 Siemens SIPROTEC 5 6MD86 (CP300) >= 7.80, < 10.0 Siemens SIPROTEC 5 6MD89 (CP300) >= 7.80, < 10.0
    affected: fixed in V10.0, mitigation support.industry.siemens.com
show 17 more
  • Siemens SIPROTEC 5 6MD89 (CP300) V9.6x < 9.68
    affected: fixed in V9.68, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 6MU85 (CP300) < 10.0 Siemens SIPROTEC 5 7KE85 (CP300) >= 7.80, < 10.0
    affected: fixed in V10.0, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7SA82 (CP100) >= 7.80, < 8.90
    affected: fixed in V8.90, mitigation
  • Siemens SIPROTEC 5 7SA82 (CP150) < 10.0 Siemens SIPROTEC 5 7SA86 (CP300) >= 7.80, < 10.0 Siemens SIPROTEC 5 7SA87 (CP300) >= 7.80, < 10.0
    affected: fixed in V10.0, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7SD82 (CP100) >= 7.80, < 8.90
    affected: fixed in V8.90, mitigation
  • Siemens SIPROTEC 5 7SD82 (CP150) < 10.0 Siemens SIPROTEC 5 7SD86 (CP300) >= 7.80, < 10.0 Siemens SIPROTEC 5 7SD87 (CP300) >= 7.80, < 10.0
    affected: fixed in V10.0, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7SJ81 (CP100) >= 7.80, < 8.90
    affected: fixed in V8.90, mitigation
  • Siemens SIPROTEC 5 7SJ81 (CP150) < 10.0
    affected: fixed in V10.0, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7SJ82 (CP100) >= 7.80, < 8.90
    affected: fixed in V8.90, mitigation
  • Siemens SIPROTEC 5 7SJ82 (CP150) < 10.0 Siemens SIPROTEC 5 7SJ85 (CP300) >= 7.80, < 10.0 Siemens SIPROTEC 5 7SJ86 (CP300) >= 7.80, < 10.0
    affected: fixed in V10.0, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7SK82 (CP100) >= 7.80, < 8.90
    affected: fixed in V8.90, mitigation
  • Siemens SIPROTEC 5 7SK82 (CP150) < 10.0 Siemens SIPROTEC 5 7SK85 (CP300) >= 7.80, < 10.0
    affected: fixed in V10.0, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7SL82 (CP100) >= 7.80, < 8.90
    affected: fixed in V8.90, mitigation
  • Siemens SIPROTEC 5 7SL82 (CP150) < 10.0 Siemens SIPROTEC 5 7SL86 (CP300) >= 7.80, < 10.0 Siemens SIPROTEC 5 7SL87 (CP300) >= 7.80, < 10.0 Siemens SIPROTEC 5 7SS85 (CP300) >= 7.80, < 10.0 Siemens SIPROTEC 5 7ST85 (CP300) >= 7.80, < 10.0
    affected: fixed in V10.0, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7ST85 (CP300) V9.6x < 9.68
    affected: fixed in V9.68, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7ST86 (CP300) < 10.0
    affected: fixed in V10.0, mitigation support.industry.siemens.com
  • Siemens SIPROTEC 5 7ST86 (CP300) V9.8x < 9.83
    affected: fixed in V9.83, mitigation support.industry.siemens.com

13 more affected, 6 more not affected in the full advisory

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-26-160-01 updated cvss 9.0

Schneider Electric Modicon Network Managed Switches

  • Schneider Electric Connexium Managed Switches Schneider Electric Modicon Managed Switches Schneider Electric Modicon Redundancy Switches
    affected: mitigation

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-25-044-06 updated cvss 9.0

Siemens RUGGEDCOM APE1808

  • Siemens RUGGEDCOM APE1808
    affected: fixed in V7.4.7, mitigation

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-26-036-05 updated cvss 9.0

Hitachi Energy XMC20

  • Hitachi Energy XMC20 R18, <= R17A
    affected: vendor fix, mitigation

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-26-036-06 updated cvss 9.0

Hitachi Energy FOX61x

  • Hitachi Energy FOX61x R18, <= R17A
    affected: vendor fix, mitigation

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-24-193-11 updated cvss 9.0

Siemens RUGGEDCOM APE 1808

  • Siemens RUGGEDCOM APE1808
    affected: vendor fix, mitigation

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-25-350-03 updated cvss 9.0

Hitachi Energy AFS, AFR and AFF Series

  • Hitachi Energy AFF 660 Hitachi Energy AFF 665 Hitachi Energy AFR 677 Hitachi Energy AFS 650 Hitachi Energy AFS 655 Hitachi Energy AFS 660-B/C/S
    +2 more products
    Hitachi Energy AFS 665-B/S Hitachi Energy AFS 670
    affected: vendor fix, mitigation “Hitachi Energy has identified the following recommended immediate actions:” publisher.hitachienergy.com
  • Hitachi Energy AFS 670 v2.0
    affected: mitigation “Hitachi Energy has identified the following recommended immediate actions:” publisher.hitachienergy.com
  • Hitachi Energy AFS 675 Hitachi Energy AFS 677
    affected: vendor fix, mitigation “Hitachi Energy has identified the following recommended immediate actions:” publisher.hitachienergy.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

14.86% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 9.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
NVD 3.1 9.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CNA 3.1 9.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

  • IETF RFC
  • Siemens CPC80 Central Processing/Communication
  • Siemens CPCI85 Central Processing/Communication
  • Siemens POWER METER SICAM Q100 family
  • Siemens POWER METER SICAM Q200 family
  • Siemens Powerlink IP
  • Siemens RUGGEDCOM APE1808
  • Siemens SICAM AK 3
  • Siemens SICAM BC
  • Siemens SICAM GridEdge (Classic)
  • Siemens SICAM GridEdge Applications for SICAM 8 Platform
  • Siemens SICAM GridPass
  • Siemens SICAM TM
  • Siemens SICORE Base system
  • Siemens SIPROTEC 5 - CP200 Devices
  • Siemens SIPROTEC 5 6MD84 (CP300)
  • Siemens SIPROTEC 5 6MD85 (CP300)
  • Siemens SIPROTEC 5 6MD86 (CP300)
  • Siemens SIPROTEC 5 6MD89 (CP300)
  • Siemens SIPROTEC 5 6MD89 (CP300) V9.6x
  • Siemens SIPROTEC 5 6MU85 (CP300)
  • Siemens SIPROTEC 5 7KE85 (CP300)
  • Siemens SIPROTEC 5 7SA82 (CP100)
  • Siemens SIPROTEC 5 7SA82 (CP150)
  • Siemens SIPROTEC 5 7SA86 (CP300)
  • Siemens SIPROTEC 5 7SA87 (CP300)
  • Siemens SIPROTEC 5 7SD82 (CP100)
  • Siemens SIPROTEC 5 7SD82 (CP150)
  • Siemens SIPROTEC 5 7SD86 (CP300)
  • Siemens SIPROTEC 5 7SD87 (CP300)
  • Siemens SIPROTEC 5 7SJ81 (CP100)
  • Siemens SIPROTEC 5 7SJ81 (CP150)
  • Siemens SIPROTEC 5 7SJ82 (CP100)
  • Siemens SIPROTEC 5 7SJ82 (CP150)
  • Siemens SIPROTEC 5 7SJ85 (CP300)
  • Siemens SIPROTEC 5 7SJ86 (CP300)
  • Siemens SIPROTEC 5 7SK82 (CP100)
  • Siemens SIPROTEC 5 7SK82 (CP150)
  • Siemens SIPROTEC 5 7SK85 (CP300)
  • Siemens SIPROTEC 5 7SL82 (CP100)
  • Siemens SIPROTEC 5 7SL82 (CP150)
  • Siemens SIPROTEC 5 7SL86 (CP300)
  • Siemens SIPROTEC 5 7SL87 (CP300)
  • Siemens SIPROTEC 5 7SS85 (CP300)
  • Siemens SIPROTEC 5 7ST85 (CP300)
  • Siemens SIPROTEC 5 7ST85 (CP300) V9.6x
  • Siemens SIPROTEC 5 7ST86 (CP300)
  • Siemens SIPROTEC 5 7ST86 (CP300) V9.8x
  • Siemens SIPROTEC 5 7SX82 (CP150)
  • Siemens SIPROTEC 5 7SX85 (CP300)

Classification

Weakness
  • CWE-354 Improper Validation of Integrity Check Value
  • CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.