Skip to content
OpenAdvisories
Critical ICSA-26-036-05 1 CVE

Hitachi Energy XMC20

Published Jan 27, 2026 · Updated Feb 5, 2026 · Revision 2

Vendor: Hitachi Energy Product: XMC20

Summary

Hitachi Energy is aware of a vulnerability that affects XMC20 product versions listed in this document. Successful exploitation of this vulnerability can lead to forgery attacks potentially causing impact on confidentiality, integrity and availability for the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. Note: This is applicable only if XMC20 devices are configured to use remote RADIUS authentication.

Vulnerabilities 1

  • Critical 9.0
    CVE-2024-3596 Public exploit EPSS 15%

    RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

    RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authen…

    IETF RFC krb5 freeradius Debian Ubuntu Alpine

Revision history

  1. #2

    Initial CISA Republication of Hitachi Energy PSIRT 8DBD000233 advisory

  2. #1

    Initial public release

References