Vulnerability in the RADIUS protocol allows for response spoofing during authentication
A group of researchers from several American universities and companies Cloudflare and Microsoft has developed a new attack technique on the RADIUS protocol, used by telecommunications operators, cloud services, and VPN providers for user authentication, authorization, and accounting. The attack, codename Blast-RADIUS, allows for spoofing the response of a RADIUS server during authentication, enabling subscriber connection without knowledge of the access password. To exploit […]
