Skip to content
OpenAdvisories
Critical ICSA-25-350-03 1 CVE

Hitachi Energy AFS, AFR and AFF Series

Published Dec 16, 2025 · Updated Dec 16, 2025

Vendor: Hitachi Energy Product: AFF 660 Product: AFF 665 Product: AFR 677 Product: AFS 650 Product: AFS 655 Product: AFS 660-B/C/S Product: AFS 665-B/S Product: AFS 670 Product: AFS 670 v2.0 Product: AFS 675 Product: AFS 677

Summary

Successful exploitation of this vulnerability could compromise the integrity of the product data and disrupt its availability.

Vulnerabilities 1

  • Critical 9.0
    CVE-2024-3596 Public exploit EPSS 15%

    RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

    RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authen…

    IETF RFC krb5 freeradius Debian Ubuntu Alpine

Revision history

  1. #1

    Initial Publication

References