Hitachi Energy has confirmed that certain FOX61x devices are affected by a critical RADIUS protocol vulnerability (tracked as CVE‑2024‑3596) that allows an on‑path attacker to forge RADIUS responses by exploiting a chosen‑prefix collision attack against the MD5‑based Response Authenticator...
Hitachi Energy's AFS, AFR and AFF series of substation and network edge devices are vulnerable to a cryptographic attack against the RADIUS protocol that can let a local attacker forge authentication responses, potentially granting or denying network access, corrupting session state, and...