topic Blast-RADIUS - CVE-2024-3596 in General Topics

Blast-RADIUS - CVE-2024-3596

Alex- — Tue, 09 Jul 2024 19:39:19 GMT

https://www.blastradius.fail/

Blast-RADIUS is a vulnerability that affects the RADIUS protocol. RADIUS is a very common protocol used for authentication, authorization, and accounting (AAA) for networked devices on enterprise and telecommunication networks.

What can the attacker do?

The Blast-RADIUS attack allows a man-in-the-middle attacker between the RADIUS client and server to forge a valid protocol accept message in response to a failed authentication request. This forgery could give the attacker access to network devices and services without the attacker guessing or brute forcing passwords or shared secrets. The attacker does not learn user credentials.

Who is affected?

Blast-RADIUS is a protocol vulnerability, and thus affects all RADIUS implementations using non-EAP authentication methods over UDP.

System administrators of networks using RADIUS should check with vendors for a patch against this vulnerability, and follow best practices for RADIUS configuration as discussed below. There is nothing that end users can do on their own to protect against this attack.

RADIUS is used in a wide variety of applications, including in enterprise networks to authenticate access to switches and other routing infrastructure, for VPN access, by ISPs for DSL and FTTH (Fiber to the Home), in 802.1X and Wi-Fi authentication, 2G and 3G cellular roaming and 5G DNN (Data Network Name) authentication, mobile Wi-Fi offload with SIM card-based authentication, private APN authentication, to authenticate access to critical infrastructure, and in the Eduroam and OpenRoaming wifi consortia.

What is the vulnerability?

The RADIUS protocol predates modern cryptographic guarantees and is typically unencrypted and unauthenticated. However, the protocol does attempt to authenticate server responses using an ad hoc construction based on the MD5 hash function and a fixed shared secret between a client and server.

Our attack combines a novel protocol vulnerability with an MD5 chosen-prefix collision attack and several new speed and space improvements. The attacker injects a malicious attribute into a request that causes a collision between the authentication information in the valid server response and the attacker’s desired forgery. This allows the attacker to turn a reject into an accept, and add arbitrary protocol attributes.

Re: Blast-RADIUS - CVE-2024-3596

Lesley — Tue, 09 Jul 2024 20:51:49 GMT

Was following it also. No SK from Check Point, still very fresh and released today I think. (Some headsup yesterday).

If I try to keep it simple the Radius server you can configure in SmartDashboard supports -> Radius V1 en V2. Protocol PAP or MS_Chap2

-----------------------------------------------------------------------------------------------------------------------

RADIUS (Remote Authentication Dial-In User Service) server is used for authentication of users. Check Point uses the RADIUS servers in these scenarios:

Administrators logging in to SmartConsole

SecuRemote Users (via IKE Hybrid Mode)

RADIUS Configuration Fields

Host is where the RADIUS server is deployed.
Service is the port to which the RADIUS server listens. Choose one of two predefined services.
- RADIUS is port number historically used by most installations.
- NEW-RADIUS is the officially registered port number.
Shared secret is the secret between the RADIUS server and the Security Gateway.
Version can be either RADIUS Version 1.0, which is RFC 2138 compliant, and RADIUS Version 2.0 which is RFC 2865 compliant. For more, see:
- RFC 2138
- RFC 2865
Protocol is the type of authentication protocol that will be used when authenticating the user to the RADIUS server. This type should be supported and enabled by the server. The MS-CHAP v2 protocol is supported by some servers, including Microsoft IAS and Cisco ACS. This protocol provides higher security and the ability to perform a password change, as an additional challenge in the authentication session, when the user is configured as "User must change password at next logon" on the server.

----------------------------------------------------------------------------------------------

Second is that you also can use Radius to authenticate to the Gaia OS(and API). But for now it is to late for me to check 😁

(https://support.checkpoint.com/results/sk/sk72940)

Re: Blast-RADIUS - CVE-2024-3596

the_rock — Tue, 09 Jul 2024 20:56:14 GMT

Thanks for that @Alex-

Re: Blast-RADIUS - CVE-2024-3596

vass — Wed, 10 Jul 2024 10:50:19 GMT

Thanks for the info.

I captured some traffic for Radius VPN Auth with user/Pwd and Checkpoint does not send the Message-Authenticator attribute (has expected bcs it was not mandatory in RFC).

But we do know now that we will need in the future to send it and also check if the reply from the server has it (and if its ok and not tempered).

Does checkpoint already have some info if this will be implemented? (dunno what its used has client in Checkpoint side but if free radius there are updated clients).

Regards,

Vlad

Re: Blast-RADIUS - CVE-2024-3596

the_rock — Wed, 10 Jul 2024 12:31:37 GMT

I hope there will be an official sk about it soon, as one is not present in the support site as of yet, unless its internal...no idea.

Andy

Re: Blast-RADIUS - CVE-2024-3596

PhoneBoy — Wed, 10 Jul 2024 21:32:03 GMT

If an attacker has gained the persistent MITM capabilities needed to exploit this, you're got far bigger issues to worry about.
In any case, it is under investigation.
Recommend opening a TAC case for tracking purposes.

Re: Blast-RADIUS - CVE-2024-3596

the_rock — Wed, 10 Jul 2024 23:32:13 GMT

Thats true, but I think an official sk or IPS protection update would probably make lots of customers feel more comfortable.

Andy

Re: Blast-RADIUS - CVE-2024-3596

PhoneBoy — Wed, 10 Jul 2024 23:37:04 GMT

I assume once our investigation is completed, such things will be provided. 🙂

Re: Blast-RADIUS - CVE-2024-3596

the_rock — Wed, 10 Jul 2024 23:39:48 GMT

I have no doubt about it 🙂

Re: Blast-RADIUS - CVE-2024-3596

vass — Thu, 11 Jul 2024 09:30:41 GMT

Sure, but there are some scenarios were it "could" happen probably (non encrypted mpls or maybe even an transparent bridge doing an "l2" Mitm somewere) and we have always the state sponsored scenario wich has we know can pretty much do anything :).

Regardless i think clients and servers will have in a near future to update software to always send and require Message-Authenticator attributes for all requests and responses

Re: Blast-RADIUS - CVE-2024-3596

PhoneBoy — Thu, 11 Jul 2024 16:26:06 GMT

Requiring/using Message Authenticator attributes in RADIUS requests/responses seems like the best short-term mitigation for this issue.
Was mentioned in an Ars Technica article I was reading, which goes into some detail about Blast RADIUS: https://arstechnica.com/security/2024/07/new-blast-radius-attack-breaks-30-year-old-protocol-used-in-networks-everywhere/

Re: Blast-RADIUS - CVE-2024-3596

Bob_Zimmerman — Thu, 11 Jul 2024 17:10:10 GMT

RADIUS over DTLS also mitigates this issue. Not a lot of servers support that, but this will hopefully drive server vendors to improve.

Re: Blast-RADIUS - CVE-2024-3596

JP_Rex — Fri, 12 Jul 2024 08:08:22 GMT

Microsoft Patch breaks CP authentication.
KB5040268: How to manage the Access-Request packets attack vulnerability associated with CVE-2024-3596 - Microsoft Support

The changes MS did broke the Authentication from CP.

I will open a Case for this.

Regards

Peter

PS I will report back

Re: Blast-RADIUS - CVE-2024-3596

vass — Fri, 12 Jul 2024 08:32:30 GMT

If they mandate the Message Authenticator it will break it, Checkpoint at least for VPN auth does no send it on the Access-request

Re: Blast-RADIUS - CVE-2024-3596

JP_Rex — Fri, 12 Jul 2024 08:53:22 GMT

there seems to be a way around this

###########

To add an exception to exclude a server from requireauthmsg validation, run the following command:

netsh nps set requiremsgauth remoteservergroup = <remote server group name> address = <server address> exception = "yes"

########

regards

Peter

Re: Blast-RADIUS - CVE-2024-3596

tjoll — Fri, 12 Jul 2024 09:25:53 GMT

I'm also experiencing more RADIUS issues at a customer since the Microsoft patch. We're getting the error "RADIUS server is not responding" although it is. I've asked them to check the provided workaround to see if it will solve their issue. I'll keep you updated with the results.

Thanks.

Best regards,
Mitchel

Re: Blast-RADIUS - CVE-2024-3596

JP_Rex — Fri, 12 Jul 2024 09:35:01 GMT

We did not run the workaround. We fond the documentation after we rolled the Juli patch back on the primary radius DC.

Let me know if it solved the issue.

Regards
Peter

Re: Blast-RADIUS - CVE-2024-3596

lraaicfdb — Fri, 12 Jul 2024 09:41:08 GMT

The workaround will not achieve much, because the configuration for "requiremsgauth" is disabled on our site. I think it is disabled by default and needs to be enabled manually. So no exception needs to be added.

@JP_Rex I'm curious to see what Checkpoint's response to your ticket is.

Re: Blast-RADIUS - CVE-2024-3596

tjoll — Fri, 12 Jul 2024 11:06:20 GMT

You're correct. I just got the confirmation that removing the update on the windows server does restore the radius authentication.

I'll also create a CP case to make them aware of this issue.

Re: Blast-RADIUS - CVE-2024-3596

tjoll — Fri, 12 Jul 2024 11:37:29 GMT

Support just gave me the following fix: https://support.checkpoint.com/results/sk/sk42184

We need to follow the steps described under the section "To ignore RADIUS attribute 80 if the problem is with VPN Client authentication"

Effectively, changing the radius_ignore setting in the global properties to the value 80. I'll let you know if this will fix the issue.