radius security

Discussions on WindowsForum.com about radius security focus on CVE-2024-3596, a high-severity vulnerability in the RADIUS authentication protocol that allows on-path attackers to forge RADIUS responses. The vulnerability affects industrial networking equipment from vendors like Schneider Electric and Hitachi Energy, including Connexium, Modicon, Modicon Redundancy switches, XMC20 platforms, and FOX61x devices. The primary mitigation is enabling RADIUS Message-Authenticator verification on both clients and servers, along with applying vendor firmware updates. These threads emphasize the importance of proper RADIUS configuration in industrial environments to prevent authentication bypass and unauthorized access.