SB2024090343 - MitM attack in Aruba Fabric Composer RADIUS protocol



SB2024090343 - MitM attack in Aruba Fabric Composer RADIUS protocol

Published: September 3, 2024

Security Bulletin ID SB2024090343
Severity
Medium
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Use of a broken or risky cryptographic algorithm (CVE-ID: CVE-2024-3596)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to use of a broken or risky cryptographic algorithm in RADIUS Protocol. A remote user can perform a man-in-the-middle (MitM) attack and gain access to target system.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.