# CVE-2024-3596: RADIUS Protocol MD5 collision forgery attack (Blast-RADIUS)

Source: https://junglewise.ai/threats/cve-2024-3596-radius-protocol-md5-collision-forgery-attack-blast-radius  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2024-07-09. Updated: 2026-05-12  
License: CC BY 4.0 with a link back

CVE-2024-3596 · Severity: critical · CVSS 9 · Published 2024-07-09

A fundamental flaw has been identified in the RADIUS protocol, a widely used standard for authenticating users on corporate networks, VPNs, and networking equipment. An attacker positioned on the network between a device and the authentication server can intercept and modify traffic to grant themselves unauthorized access. This could allow an attacker to bypass security checks, including multi-factor authentication, and gain full access to sensitive network resources without needing valid credentials.

Technologies: [Broadcom Brocade Sannav](https://junglewise.ai/threats/technologies/brocade-sannav), [Freeradius](https://junglewise.ai/threats/technologies/freeradius), [Siemens RUGGEDCOM CROSSBOW](https://junglewise.ai/threats/technologies/ruggedcom-crossbow), [SonicWall SonicOS](https://junglewise.ai/threats/technologies/sonicos). Vendors: [Broadcom](https://junglewise.ai/threats/vendors/broadcom), [Freeradius](https://junglewise.ai/threats/vendors/freeradius), [Siemens](https://junglewise.ai/threats/vendors/siemens), [SonicWall](https://junglewise.ai/threats/vendors/sonicwall).

## Quick answers

**Is CVE-2024-3596 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-3596 being exploited in the wild.

**How severe is CVE-2024-3596?** Critical severity, with a CVSS score of 9, published 9 July 2024.

**Which products and versions are affected?** Ietf RADIUS Protocol All versions using MD5 Response Authenticator without Message-Authenticator attribute; Siemens RUGGEDCOM CROSSBOW < V5.6; Siemens RUGGEDCOM ROS < V4.3.11.

**Is there a fix for CVE-2024-3596?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2024-3596 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2024-3596?** Check whether you run Broadcom Brocade Sannav, Broadcom Fabric Operating System, Freeradius or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The RADIUS protocol (RFC 2865) is susceptible to a chosen-prefix collision attack against the MD5-based Response Authenticator signature. An on-path attacker (Man-in-the-Middle) can intercept an Access-Request and modify the server's response (e.g., changing an Access-Reject to an Access-Accept) by manipulating the MD5 hash. This is possible because the protocol lacks mandatory integrity checks for the entire packet in many configurations. The attack, known as 'Blast-RADIUS', allows for the injection of arbitrary attributes and can bypass Multi-Factor Authentication (MFA) if it relies on Access-Challenge packets. Mitigation requires enforcing the 'Message-Authenticator' attribute or migrating to RADIUS over TLS (RadSec) or DTLS.

## Affected products

- FreeRADIUS FreeRADIUS < 3.0.27
- IETF RADIUS Protocol (RFC 2865) All versions using MD5 Response Authenticator without Message-Authenticator attribute
- Siemens RUGGEDCOM ROS < V4.3.11
- Siemens RUGGEDCOM CROSSBOW < V5.6
- Broadcom Fabric Operating System
- SonicWall SonicOS

## Timeline

- 2024-07-09: disclosed: Public disclosure of Blast-RADIUS attack
- 2024-07-09: advisory: Initial NVD and vendor advisories published

## References

- [http://www.openwall.com/lists/oss-security/2024/07/09/4](http://www.openwall.com/lists/oss-security/2024/07/09/4)
- [https://cert-portal.siemens.com/productcert/html/ssa-723487.html](https://cert-portal.siemens.com/productcert/html/ssa-723487.html)
- [https://cert-portal.siemens.com/productcert/html/ssa-794185.html](https://cert-portal.siemens.com/productcert/html/ssa-794185.html)
- [https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/](https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/)
- [https://datatracker.ietf.org/doc/html/rfc2865](https://datatracker.ietf.org/doc/html/rfc2865)
- [https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf](https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf)
- [https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014](https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014)

## Related threats

- [FreeRADIUS stack buffer overflow in EAP-FAST module](https://junglewise.ai/threats/cve-2026-127030-a-flaw-was-found-in-freeradius-an-improper-length-validation-in)
- [FreeRADIUS stack buffer overflow in EAP-SIM module](https://junglewise.ai/threats/cve-2026-127029-a-flaw-was-found-in-freeradius-s-extensible-authentication)
- [SonicWall SonicOS heap-based buffer overflow in SSL-VPN](https://junglewise.ai/threats/cve-2026-82308-a-pre-authentication-heap-based-buffer-overflow-vulnerability-has)
- [SonicWall SonicOS heap buffer overflow in TACACS+ client](https://junglewise.ai/threats/cve-2026-77709-a-pre-authentication-heap-based-buffer-overflow-vulnerability-has)
- [SonicWall SonicOS stack-based buffer overflow in TACACS+ client](https://junglewise.ai/threats/cve-2026-77708-a-pre-authentication-stack-based-buffer-overflow-vulnerability)