[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0_KYJmVyErt4FDodee3EAfxupIUlbBMOP6yy7NDdPRQ":3,"g5a-risk:CVE-2024-3596":211},{"success":4,"data":5,"meta":208},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":56,"references":57,"referencesCount":125,"weaknesses":126,"weaknessesCount":141,"isActivelyExploited":142,"cisaInfo":26,"otxData":26,"relatedBlogPosts":143,"seoMetadata":144,"configurations":169,"relatedVendorCves":192,"notableEvents":193},"CVE-2024-3596","What is CVE-2024-3596?","RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.","RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Acce...","2024-07-09T12:15:20.7","2026-06-17T07:44:35.05",9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":35},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","CHANGED","CRITICAL",null,2.2,6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],[],0.14859,[36,36,36,36,36,36,36],"Critical",[40,44,49,52],{"vendor":41,"product":41,"version":42,"criteria":43,"vulnerable":4},"freeradius","*","cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"broadcom","brocade_sannav","-","cpe:2.3:a:broadcom:brocade_sannav:-:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":47,"criteria":51,"vulnerable":4},"fabric_operating_system","cpe:2.3:o:broadcom:fabric_operating_system:-:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":47,"criteria":55,"vulnerable":4},"sonicwall","sonicos","cpe:2.3:o:sonicwall:sonicos:-:*:*:*:*:*:*:*",4,[58,63,67,70,75,78,83,87,91,93,95,97,99,101,105,109,111,115,118,120,123],{"url":59,"source":60,"tags":61},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F07\u002F09\u002F4","Openwall",[62],"Mailing List",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-723487.html","Siemens",[],{"url":68,"source":65,"tags":69},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-794185.html",[],{"url":71,"source":72,"tags":73},"https:\u002F\u002Fdatatracker.ietf.org\u002Fdoc\u002Fdraft-ietf-radext-deprecating-radius\u002F","Ietf",[74],"Technical Description",{"url":76,"source":72,"tags":77},"https:\u002F\u002Fdatatracker.ietf.org\u002Fdoc\u002Fhtml\u002Frfc2865",[74],{"url":79,"source":80,"tags":81},"https:\u002F\u002Fnetworkradius.com\u002Fassets\u002Fpdf\u002Fradius_and_md5_collisions.pdf","Networkradius",[82],"Third Party Advisory",{"url":84,"source":85,"tags":86},"https:\u002F\u002Fpsirt.global.sonicwall.com\u002Fvuln-detail\u002FSNWLID-2024-0014","Sonicwall",[82],{"url":88,"source":89,"tags":90},"https:\u002F\u002Fwww.blastradius.fail\u002F","Blastradius",[74],{"url":59,"source":60,"tags":92},[62],{"url":71,"source":72,"tags":94},[74],{"url":76,"source":72,"tags":96},[74],{"url":79,"source":80,"tags":98},[82],{"url":84,"source":85,"tags":100},[82],{"url":102,"source":103,"tags":104},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240822-0001\u002F","Netapp",[82],{"url":106,"source":107,"tags":108},"https:\u002F\u002Ftoday.ucsd.edu\u002Fstory\u002Fcomputer-scientists-discover-vulnerabilities-in-a-popular-security-protocol","Ucsd",[82],{"url":88,"source":89,"tags":110},[74],{"url":112,"source":113,"tags":114},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F456537","Cert",[],{"url":116,"source":65,"tags":117},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-364175.html",[],{"url":64,"source":65,"tags":119},[],{"url":121,"source":65,"tags":122},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-770770.html",[],{"url":68,"source":65,"tags":124},[],21,[127,135],{"id":128,"name":129,"description":130,"extendedDescription":131,"status":132,"abstraction":133,"structure":134},"CWE-354","Improper Validation of Integrity Check Value","The product does not validate or incorrectly validates the integrity check values or \"checksums\" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.","Improper validation of checksums before use results in an unnecessary risk that can easily be mitigated. The protocol specification describes the algorithm used for calculating the checksum. It is then a simple matter of implementing the calculation and verifying that the calculated checksum and the received checksum match. Improper verification of the calculated checksum and the received checksum can lead to far greater consequences.","Draft","Base","Simple",{"id":136,"name":137,"description":138,"extendedDescription":139,"status":140,"abstraction":133,"structure":134},"CWE-924","Improper Enforcement of Message Integrity During Transmission in a Communication Channel","The product establishes a communication channel with an endpoint and receives a message from that endpoint, but it does not sufficiently ensure that the message was not modified during transmission.","Attackers might be able to modify the message and spoof the endpoint by interfering with the data as it crosses the network or by redirecting the connection to a system under their control.","Incomplete",2,false,[],{"title":145,"metaDescription":146,"keywords":147,"canonicalUrl":148,"structuredData":149},"What is CVE-2024-3596? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-3596, a critical severity cyber security vulnerability from 2024. RADIUS Protocol under RFC 2865 is susceptible to forgery...","CVE-2024-3596, CVE-2024-3596 vulnerability, CVE-2024-3596 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, freeradius security, broadcom security, sonicwall security, freeradius vulnerability, brocade_sannav vulnerability, fabric_operating_system vulnerability, sonicos vulnerability","\u002Fwhat-is\u002Fcve-2024-3596",{"@context":150,"@type":151,"headline":145,"description":146,"datePublished":10,"dateModified":11,"author":152,"publisher":156,"about":160,"mainEntityOfPage":164,"articleSection":167,"keywords":168},"https:\u002F\u002Fschema.org","TechArticle",{"@type":153,"name":154,"url":155},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":153,"name":154,"url":155,"logo":157},{"@type":158,"url":159},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":161,"name":6,"description":162,"additionalType":163},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":165,"@id":166},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-3596","Cybersecurity","CVE-2024-3596, CVE-2024-3596 vulnerability, CVE-2024-3596 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[170,178,186],{"Operator":26,"Negate":26,"Nodes":171},[172],{"Operator":173,"Negate":142,"CPEMatch":174},"OR",[175],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":176,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":177,"VersionEndIncluding":26},"1C73FF4C-13DE-4050-BD56-447F9382AA4D","3.0.27",{"Operator":26,"Negate":26,"Nodes":179},[180],{"Operator":173,"Negate":142,"CPEMatch":181},[182,184],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":183,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"75B1EDA5-F189-440D-AD0E-C70DD2C0FEE5",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":185,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"046FB51E-B768-44D3-AEB5-D857145CA840",{"Operator":26,"Negate":26,"Nodes":187},[188],{"Operator":173,"Negate":142,"CPEMatch":189},[190],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":191,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1CF61DAA-8295-4407-B125-1714E1565965",[],[194,201],{"id":195,"eventType":196,"eventTime":197,"details":198,"label":199,"color":200},"7fc7e7c1-94c4-4bfc-9ab6-71582058d15b","HIGH_EPSS_DELTA","2025-08-18T04:04:45.08564+00:00","Daily EPSS score increased by 0.185 on 2024-07-11","EPSS Score Increased","red",{"id":202,"eventType":203,"eventTime":204,"details":205,"label":206,"color":207},"8ceed1a5-f77f-470f-873a-5b7d112146a5","LOW_EPSS_DELTA","2025-09-19T04:06:46.144056+00:00","Daily EPSS score decreased by 0.137 on 2024-07-11","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":209,"version":210},1793228998428,"2.0",{"score":212,"band":213,"action":214,"scoredAt":215},51,"Medium","Plan remediation","2026-10-28T07:02:58.0636+00:00"]