Technical Tip: How to address RADIUS Protocol Vuln...

FortiDDoS

FortiDDoS protects from both known and zero day attacks with very low latency. It’s easy to deploy and manage, and includes comprehensive reporting and analysis tools.

Article Id 341851

Description

This article describes how to address RADIUS Protocol Vulnerability CVE-2024-3596 (commonly known as Blast-RADIUS) on the FortiDDoS-F series.

Scope

FortiDDoS-F Series (Fixed in v7.0.3, 6.6.4 above).

Solution

FortiDDoS will not be susceptible to CVE-2024-3596 if the Message-Authenticator Attribute configured as below:

Navigate to FortiDDoS CLI: RADIUS authentication:(

config system authentication radius

set require-msg-auth

end

Note:

Fixed in v7.0.3, v6.6.4 and above.

531

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to address RADIUS Protocol Vulnerability CVE-2024-3596 (Blast-RADIUS) on FortiDDoS-F

You are leaving our website