Cybersecurity researchers have discovered a critical security vulnerability in RADIUS, a widely used network authentication protocol dating back to the 1990s that’s still in widespread use today.

OTTAWA, Ontario--(BUSINESS WIRE)--The BlastRADIUS vulnerability announced July 9 by cybersecurity researchers involves the RADIUS protocol which underlies most network connections worldwide. When the ...

Overview A vulnerability in the RADIUS protocol allows an attacker allows an attacker to forge an authentication response in cases where a Message-Authenticator attribute is not required or enforced.

There's potentially an easy mitigation here, since the access accept response can also provide additional parameters to the RADIUS client, which could be in the form of a VLAN ID, IP Address, Access ...