RADIUS Protocol CVE-2024-3596

RADIUS Protocol CVE-2024-3596 Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-24-255 Final 1 1 2024-08-13T00:00:00 Current version 2024-08-13T00:00:00 2025-07-10T00:00:00 A fundamental design flaw within the RADIUS protocol has been proven to be exploitable, compromising the integrity in the RADIUS Access-Request process. The attack allows a malicious user to modify packets in a way that would be indistinguishable to a RADIUS client or server. To be successful, the attacker must have the ability to inject themselves between the client and server. None Escalation of privilege https://fortiguard.fortinet.com/psirt/FG-IR-24-255 RADIUS Protocol CVE-2024-3596 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3596 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3596 https://www.blastradius.fail/ https://www.blastradius.fail/ FortiADC 7.6.0 FortiADC 7.4.5 FortiADC 7.4.4 FortiADC 7.4.3 FortiADC 7.4.2 FortiADC 7.4.1 FortiADC 7.4.0 FortiADC 7.2.8 FortiADC 7.2.7 FortiADC 7.2.6 FortiADC 7.2.5 FortiADC 7.2.4 FortiADC 7.2.3 FortiADC 7.2.2 FortiADC 7.2.1 FortiADC 7.2.0 FortiADC 7.1.5 FortiADC 7.1.4 FortiADC 7.1.3 FortiADC 7.1.2 FortiADC 7.1.1 FortiADC 7.1.0 FortiADC 7.0.6 FortiADC 7.0.5 FortiADC 7.0.4 FortiADC 7.0.3 FortiADC 7.0.2 FortiADC 7.0.1 FortiADC 7.0.0 FortiADC 6.2.6 FortiADC 6.2.5 FortiADC 6.2.4 FortiADC 6.2.3 FortiADC 6.2.2 FortiADC 6.2.1 FortiADC 6.2.0 FortiADC 6.1.6 FortiADC 6.1.5 FortiADC 6.1.4 FortiADC 6.1.3 FortiADC 6.1.2 FortiADC 6.1.1 FortiADC 6.1.0 FortiADC 6.0.4 FortiADC 6.0.3 FortiADC 6.0.2 FortiADC 6.0.1 FortiADC 6.0.0 FortiAnalyzer 7.6.0 FortiAnalyzer 7.4.5 FortiAnalyzer 7.4.4 FortiAnalyzer 7.4.3 FortiAnalyzer 7.4.2 FortiAnalyzer 7.4.1 FortiAnalyzer 7.4.0 FortiAnalyzer 7.2.9 FortiAnalyzer 7.2.8 FortiAnalyzer 7.2.7 FortiAnalyzer 7.2.6 FortiAnalyzer 7.2.5 FortiAnalyzer 7.2.4 FortiAnalyzer 7.2.3 FortiAnalyzer 7.2.2 FortiAnalyzer 7.2.1 FortiAnalyzer 7.2.0 FortiAnalyzer 7.0.16 FortiAnalyzer 7.0.15 FortiAnalyzer 7.0.14 FortiAnalyzer 7.0.13 FortiAnalyzer 7.0.12 FortiAnalyzer 7.0.11 FortiAnalyzer 7.0.10 FortiAnalyzer 7.0.9 FortiAnalyzer 7.0.8 FortiAnalyzer 7.0.7 FortiAnalyzer 7.0.6 FortiAnalyzer 7.0.5 FortiAnalyzer 7.0.4 FortiAnalyzer 7.0.3 FortiAnalyzer 7.0.2 FortiAnalyzer 7.0.1 FortiAnalyzer 7.0.0 FortiAuthenticator 6.6.2 FortiAuthenticator 6.6.1 FortiAuthenticator 6.6.0 FortiAuthenticator 6.5.5 FortiAuthenticator 6.5.4 FortiAuthenticator 6.5.3 FortiAuthenticator 6.5.2 FortiAuthenticator 6.5.1 FortiAuthenticator 6.5.0 FortiAuthenticator 6.4.9 FortiAuthenticator 6.4.8 FortiAuthenticator 6.4.7 FortiAuthenticator 6.4.6 FortiAuthenticator 6.4.5 FortiAuthenticator 6.4.4 FortiAuthenticator 6.4.3 FortiAuthenticator 6.4.2 FortiAuthenticator 6.4.1 FortiAuthenticator 6.4.0 FortiGuest 1.3.0 FortiGuest 1.2.1 FortiGuest 1.2.0 FortiGuest 1.1.0 FortiGuest 1.0.0 FortiManager 7.6.1 FortiManager 7.6.0 FortiManager 7.4.5 FortiManager 7.4.4 FortiManager 7.4.3 FortiManager 7.4.2 FortiManager 7.4.1 FortiManager 7.4.0 FortiManager 7.2.9 FortiManager 7.2.8 FortiManager 7.2.7 FortiManager 7.2.6 FortiManager 7.2.5 FortiManager 7.2.4 FortiManager 7.2.3 FortiManager 7.2.2 FortiManager 7.2.1 FortiManager 7.2.0 FortiManager 7.0.16 FortiManager 7.0.15 FortiManager 7.0.14 FortiManager 7.0.13 FortiManager 7.0.12 FortiManager 7.0.11 FortiManager 7.0.10 FortiManager 7.0.9 FortiManager 7.0.8 FortiManager 7.0.7 FortiManager 7.0.6 FortiManager 7.0.5 FortiManager 7.0.4 FortiManager 7.0.3 FortiManager 7.0.2 FortiManager 7.0.1 FortiManager 7.0.0 FortiOS 7.6.0 FortiOS 7.4.5 FortiOS 7.4.4 FortiOS 7.4.3 FortiOS 7.4.2 FortiOS 7.4.1 FortiOS 7.4.0 FortiOS 7.2.10 FortiOS 7.2.9 FortiOS 7.2.8 FortiOS 7.2.7 FortiOS 7.2.6 FortiOS 7.2.5 FortiOS 7.2.4 FortiOS 7.2.3 FortiOS 7.2.2 FortiOS 7.2.1 FortiOS 7.2.0 FortiOS 7.0.19 FortiOS 7.0.18 FortiOS 7.0.17 FortiOS 7.0.16 FortiOS 7.0.15 FortiOS 7.0.14 FortiOS 7.0.13 FortiOS 7.0.12 FortiOS 7.0.11 FortiOS 7.0.10 FortiOS 7.0.9 FortiOS 7.0.8 FortiOS 7.0.7 FortiOS 7.0.6 FortiOS 7.0.5 FortiOS 7.0.4 FortiOS 7.0.3 FortiOS 7.0.2 FortiOS 7.0.1 FortiOS 7.0.0 FortiOS 6.4.16 FortiOS 6.4.15 FortiOS 6.4.14 FortiOS 6.4.13 FortiOS 6.4.12 FortiOS 6.4.11 FortiOS 6.4.10 FortiOS 6.4.9 FortiOS 6.4.8 FortiOS 6.4.7 FortiOS 6.4.6 FortiOS 6.4.5 FortiOS 6.4.4 FortiOS 6.4.3 FortiOS 6.4.2 FortiOS 6.4.1 FortiOS 6.4.0 FortiProxy 7.4.5 FortiProxy 7.4.4 FortiProxy 7.4.3 FortiProxy 7.4.2 FortiProxy 7.4.1 FortiProxy 7.4.0 FortiProxy 7.2.16 FortiProxy 7.2.15 FortiProxy 7.2.14 FortiProxy 7.2.13 FortiProxy 7.2.12 FortiProxy 7.2.11 FortiProxy 7.2.10 FortiProxy 7.2.9 FortiProxy 7.2.8 FortiProxy 7.2.7 FortiProxy 7.2.6 FortiProxy 7.2.5 FortiProxy 7.2.4 FortiProxy 7.2.3 FortiProxy 7.2.2 FortiProxy 7.2.1 FortiProxy 7.2.0 FortiProxy 7.0.23 FortiProxy 7.0.22 FortiProxy 7.0.21 FortiProxy 7.0.20 FortiProxy 7.0.19 FortiProxy 7.0.18 FortiProxy 7.0.17 FortiProxy 7.0.16 FortiProxy 7.0.15 FortiProxy 7.0.14 FortiProxy 7.0.13 FortiProxy 7.0.12 FortiProxy 7.0.11 FortiProxy 7.0.10 FortiProxy 7.0.9 FortiProxy 7.0.8 FortiProxy 7.0.7 FortiProxy 7.0.6 FortiProxy 7.0.5 FortiProxy 7.0.4 FortiProxy 7.0.3 FortiProxy 7.0.2 FortiProxy 7.0.1 FortiProxy 7.0.0 FortiSandbox 5.0.0 FortiSandbox 4.4.6 FortiSandbox 4.4.5 FortiSandbox 4.4.4 FortiSandbox 4.4.3 FortiSandbox 4.4.2 FortiSandbox 4.4.1 FortiSandbox 4.4.0 FortiSandbox 4.2.8 FortiSandbox 4.2.7 FortiSandbox 4.2.6 FortiSandbox 4.2.5 FortiSandbox 4.2.4 FortiSandbox 4.2.3 FortiSandbox 4.2.2 FortiSandbox 4.2.1 FortiSandbox 4.0.6 FortiSandbox 4.0.5 FortiSandbox 4.0.4 FortiSandbox 4.0.3 FortiSandbox 4.0.2 FortiSandbox 4.0.1 FortiSandbox 4.0.0 FortiSwitch 7.4.0 FortiSwitch 7.2.5 FortiSwitch 7.2.4 FortiSwitch 7.2.3 FortiSwitch 7.2.2 FortiSwitch 7.2.1 FortiSwitch 7.2.0 FortiSwitch 7.0.7 FortiSwitch 7.0.6 FortiSwitch 7.0.5 FortiSwitch 7.0.4 FortiSwitch 7.0.3 FortiSwitch 7.0.2 FortiSwitch 7.0.1 FortiSwitch 7.0.0 FortiSwitch 6.4.15 FortiSwitch 6.4.14 FortiSwitch 6.4.13 FortiSwitch 6.4.12 FortiSwitch 6.4.11 FortiSwitch 6.4.10 FortiSwitch 6.4.9 FortiSwitch 6.4.8 FortiSwitch 6.4.7 FortiSwitch 6.4.6 FortiSwitch 6.4.5 FortiSwitch 6.4.4 FortiSwitch 6.4.3 FortiSwitch 6.4.2 FortiSwitch 6.4.1 FortiSwitch 6.4.0 FortiWeb 7.6.0 FortiWeb 7.4.4 FortiWeb 7.4.3 FortiWeb 7.4.2 FortiWeb 7.4.1 FortiWeb 7.4.0 FortiWeb 7.2.12 FortiWeb 7.2.11 FortiWeb 7.2.10 FortiWeb 7.2.9 FortiWeb 7.2.8 FortiWeb 7.2.7 FortiWeb 7.2.6 FortiWeb 7.2.5 FortiWeb 7.2.4 FortiWeb 7.2.3 FortiWeb 7.2.2 FortiWeb 7.2.1 FortiWeb 7.2.0 FortiWeb 7.0.12 FortiWeb 7.0.11 FortiWeb 7.0.10 FortiWeb 7.0.9 FortiWeb 7.0.8 FortiWeb 7.0.7 FortiWeb 7.0.6 FortiWeb 7.0.5 FortiWeb 7.0.4 FortiWeb 7.0.3 FortiWeb 7.0.2 FortiWeb 7.0.1 FortiWeb 7.0.0 RADIUS Protocol CVE-2024-3596 CVE-2024-3596 FortiADC-7.6.0 FortiADC-7.4.5 FortiADC-7.4.4 FortiADC-7.4.3 FortiADC-7.4.2 FortiADC-7.4.1 FortiADC-7.4.0 FortiADC-7.2.8 FortiADC-7.2.7 FortiADC-7.2.6 FortiADC-7.2.5 FortiADC-7.2.4 FortiADC-7.2.3 FortiADC-7.2.2 FortiADC-7.2.1 FortiADC-7.2.0 FortiADC-7.1.5 FortiADC-7.1.4 FortiADC-7.1.3 FortiADC-7.1.2 FortiADC-7.1.1 FortiADC-7.1.0 FortiADC-7.0.6 FortiADC-7.0.5 FortiADC-7.0.4 FortiADC-7.0.3 FortiADC-7.0.2 FortiADC-7.0.1 FortiADC-7.0.0 FortiADC-6.2.6 FortiADC-6.2.5 FortiADC-6.2.4 FortiADC-6.2.3 FortiADC-6.2.2 FortiADC-6.2.1 FortiADC-6.2.0 FortiADC-6.1.6 FortiADC-6.1.5 FortiADC-6.1.4 FortiADC-6.1.3 FortiADC-6.1.2 FortiADC-6.1.1 FortiADC-6.1.0 FortiADC-6.0.4 FortiADC-6.0.3 FortiADC-6.0.2 FortiADC-6.0.1 FortiADC-6.0.0 FortiAnalyzer-7.6.0 FortiAnalyzer-7.4.5 FortiAnalyzer-7.4.4 FortiAnalyzer-7.4.3 FortiAnalyzer-7.4.2 FortiAnalyzer-7.4.1 FortiAnalyzer-7.4.0 FortiAnalyzer-7.2.9 FortiAnalyzer-7.2.8 FortiAnalyzer-7.2.7 FortiAnalyzer-7.2.6 FortiAnalyzer-7.2.5 FortiAnalyzer-7.2.4 FortiAnalyzer-7.2.3 FortiAnalyzer-7.2.2 FortiAnalyzer-7.2.1 FortiAnalyzer-7.2.0 FortiAnalyzer-7.0.16 FortiAnalyzer-7.0.15 FortiAnalyzer-7.0.14 FortiAnalyzer-7.0.13 FortiAnalyzer-7.0.12 FortiAnalyzer-7.0.11 FortiAnalyzer-7.0.10 FortiAnalyzer-7.0.9 FortiAnalyzer-7.0.8 FortiAnalyzer-7.0.7 FortiAnalyzer-7.0.6 FortiAnalyzer-7.0.5 FortiAnalyzer-7.0.4 FortiAnalyzer-7.0.3 FortiAnalyzer-7.0.2 FortiAnalyzer-7.0.1 FortiAnalyzer-7.0.0 FortiAuthenticator-6.6.2 FortiAuthenticator-6.6.1 FortiAuthenticator-6.6.0 FortiAuthenticator-6.5.5 FortiAuthenticator-6.5.4 FortiAuthenticator-6.5.3 FortiAuthenticator-6.5.2 FortiAuthenticator-6.5.1 FortiAuthenticator-6.5.0 FortiAuthenticator-6.4.9 FortiAuthenticator-6.4.8 FortiAuthenticator-6.4.7 FortiAuthenticator-6.4.6 FortiAuthenticator-6.4.5 FortiAuthenticator-6.4.4 FortiAuthenticator-6.4.3 FortiAuthenticator-6.4.2 FortiAuthenticator-6.4.1 FortiAuthenticator-6.4.0 FortiGuest-1.3.0 FortiGuest-1.2.1 FortiGuest-1.2.0 FortiGuest-1.1.0 FortiGuest-1.0.0 FortiManager-7.6.1 FortiManager-7.6.0 FortiManager-7.4.5 FortiManager-7.4.4 FortiManager-7.4.3 FortiManager-7.4.2 FortiManager-7.4.1 FortiManager-7.4.0 FortiManager-7.2.9 FortiManager-7.2.8 FortiManager-7.2.7 FortiManager-7.2.6 FortiManager-7.2.5 FortiManager-7.2.4 FortiManager-7.2.3 FortiManager-7.2.2 FortiManager-7.2.1 FortiManager-7.2.0 FortiManager-7.0.16 FortiManager-7.0.15 FortiManager-7.0.14 FortiManager-7.0.13 FortiManager-7.0.12 FortiManager-7.0.11 FortiManager-7.0.10 FortiManager-7.0.9 FortiManager-7.0.8 FortiManager-7.0.7 FortiManager-7.0.6 FortiManager-7.0.5 FortiManager-7.0.4 FortiManager-7.0.3 FortiManager-7.0.2 FortiManager-7.0.1 FortiManager-7.0.0 FortiOS-7.6.0 FortiOS-7.4.5 FortiOS-7.4.4 FortiOS-7.4.3 FortiOS-7.4.2 FortiOS-7.4.1 FortiOS-7.4.0 FortiOS-7.2.10 FortiOS-7.2.9 FortiOS-7.2.8 FortiOS-7.2.7 FortiOS-7.2.6 FortiOS-7.2.5 FortiOS-7.2.4 FortiOS-7.2.3 FortiOS-7.2.2 FortiOS-7.2.1 FortiOS-7.2.0 FortiOS-7.0.19 FortiOS-7.0.18 FortiOS-7.0.17 FortiOS-7.0.16 FortiOS-7.0.15 FortiOS-7.0.14 FortiOS-7.0.13 FortiOS-7.0.12 FortiOS-7.0.11 FortiOS-7.0.10 FortiOS-7.0.9 FortiOS-7.0.8 FortiOS-7.0.7 FortiOS-7.0.6 FortiOS-7.0.5 FortiOS-7.0.4 FortiOS-7.0.3 FortiOS-7.0.2 FortiOS-7.0.1 FortiOS-7.0.0 FortiOS-6.4.16 FortiOS-6.4.15 FortiOS-6.4.14 FortiOS-6.4.13 FortiOS-6.4.12 FortiOS-6.4.11 FortiOS-6.4.10 FortiOS-6.4.9 FortiOS-6.4.8 FortiOS-6.4.7 FortiOS-6.4.6 FortiOS-6.4.5 FortiOS-6.4.4 FortiOS-6.4.3 FortiOS-6.4.2 FortiOS-6.4.1 FortiOS-6.4.0 FortiProxy-7.4.5 FortiProxy-7.4.4 FortiProxy-7.4.3 FortiProxy-7.4.2 FortiProxy-7.4.1 FortiProxy-7.4.0 FortiProxy-7.2.16 FortiProxy-7.2.15 FortiProxy-7.2.14 FortiProxy-7.2.13 FortiProxy-7.2.12 FortiProxy-7.2.11 FortiProxy-7.2.10 FortiProxy-7.2.9 FortiProxy-7.2.8 FortiProxy-7.2.7 FortiProxy-7.2.6 FortiProxy-7.2.5 FortiProxy-7.2.4 FortiProxy-7.2.3 FortiProxy-7.2.2 FortiProxy-7.2.1 FortiProxy-7.2.0 FortiProxy-7.0.23 FortiProxy-7.0.22 FortiProxy-7.0.21 FortiProxy-7.0.20 FortiProxy-7.0.19 FortiProxy-7.0.18 FortiProxy-7.0.17 FortiProxy-7.0.16 FortiProxy-7.0.15 FortiProxy-7.0.14 FortiProxy-7.0.13 FortiProxy-7.0.12 FortiProxy-7.0.11 FortiProxy-7.0.10 FortiProxy-7.0.9 FortiProxy-7.0.8 FortiProxy-7.0.7 FortiProxy-7.0.6 FortiProxy-7.0.5 FortiProxy-7.0.4 FortiProxy-7.0.3 FortiProxy-7.0.2 FortiProxy-7.0.1 FortiProxy-7.0.0 FortiSandbox-5.0.0 FortiSandbox-4.4.6 FortiSandbox-4.4.5 FortiSandbox-4.4.4 FortiSandbox-4.4.3 FortiSandbox-4.4.2 FortiSandbox-4.4.1 FortiSandbox-4.4.0 FortiSandbox-4.2.8 FortiSandbox-4.2.7 FortiSandbox-4.2.6 FortiSandbox-4.2.5 FortiSandbox-4.2.4 FortiSandbox-4.2.3 FortiSandbox-4.2.2 FortiSandbox-4.2.1 FortiSandbox-4.0.6 FortiSandbox-4.0.5 FortiSandbox-4.0.4 FortiSandbox-4.0.3 FortiSandbox-4.0.2 FortiSandbox-4.0.1 FortiSandbox-4.0.0 FortiSwitch-7.4.0 FortiSwitch-7.2.5 FortiSwitch-7.2.4 FortiSwitch-7.2.3 FortiSwitch-7.2.2 FortiSwitch-7.2.1 FortiSwitch-7.2.0 FortiSwitch-7.0.7 FortiSwitch-7.0.6 FortiSwitch-7.0.5 FortiSwitch-7.0.4 FortiSwitch-7.0.3 FortiSwitch-7.0.2 FortiSwitch-7.0.1 FortiSwitch-7.0.0 FortiSwitch-6.4.15 FortiSwitch-6.4.14 FortiSwitch-6.4.13 FortiSwitch-6.4.12 FortiSwitch-6.4.11 FortiSwitch-6.4.10 FortiSwitch-6.4.9 FortiSwitch-6.4.8 FortiSwitch-6.4.7 FortiSwitch-6.4.6 FortiSwitch-6.4.5 FortiSwitch-6.4.4 FortiSwitch-6.4.3 FortiSwitch-6.4.2 FortiSwitch-6.4.1 FortiSwitch-6.4.0 FortiWeb-7.6.0 FortiWeb-7.4.4 FortiWeb-7.4.3 FortiWeb-7.4.2 FortiWeb-7.4.1 FortiWeb-7.4.0 FortiWeb-7.2.12 FortiWeb-7.2.11 FortiWeb-7.2.10 FortiWeb-7.2.9 FortiWeb-7.2.8 FortiWeb-7.2.7 FortiWeb-7.2.6 FortiWeb-7.2.5 FortiWeb-7.2.4 FortiWeb-7.2.3 FortiWeb-7.2.2 FortiWeb-7.2.1 FortiWeb-7.2.0 FortiWeb-7.0.12 FortiWeb-7.0.11 FortiWeb-7.0.10 FortiWeb-7.0.9 FortiWeb-7.0.8 FortiWeb-7.0.7 FortiWeb-7.0.6 FortiWeb-7.0.5 FortiWeb-7.0.4 FortiWeb-7.0.3 FortiWeb-7.0.2 FortiWeb-7.0.1 FortiWeb-7.0.0 6.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N/E:P/RL:W/RC:C https://fortiguard.fortinet.com/psirt/FG-IR-24-255 RADIUS Protocol CVE-2024-3596 Reference> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3596 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3596 https://www.blastradius.fail/ https://www.blastradius.fail/