# BlastRADIUS Attack: 30-Year-Old Flaw Bypasses Multi-Factor Authentication

**URL:** <https://onehack.st/t/blastradius-attack-30-year-old-flaw-bypasses-multi-factor-authentication/286490>\
**Category:** News & Articles\
**Tags:** hacking\
**Created:** [July 10, 2024, 9:58am UTC](https://onehack.st/t/blastradius-attack-30-year-old-flaw-bypasses-multi-factor-authentication/286490 "2024-07-10T09:58:40Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nina](https://onehack.st/user_avatar/onehack.st/nina/32/86958_2.png) [@Nina](https://onehack.st/u/Nina)\
**Post date:** [July 10, 2024, 9:58am UTC](https://onehack.st/t/blastradius-attack-30-year-old-flaw-bypasses-multi-factor-authentication/286490/1 "2024-07-10T09:58:40Z")

</div>

**Summary:**

1. A critical flaw in the 30-year-old RADIUS protocol, known as the BlastRADIUS attack, allows attackers to bypass multi-factor authentication and gain unauthorized network access.
2. The vulnerability (CVE-2024-3596) affects many devices like switches, routers, access points, and VPN products due to unauthenticated Access-Request packets lacking integrity checks.
3. To mitigate the risk, all RADIUS servers must be upgraded, as upgrading only the clients will not secure the network.

[Read more on SecurityWeek](https://securityweek.com)