Skip to content
OpenAdvisories
Critical ICSA-26-036-06 1 CVE

Hitachi Energy FOX61x

Published Jan 27, 2026 · Updated Feb 5, 2026 · Revision 2

Vendor: Hitachi Energy Product: FOX61x

Summary

Hitachi Energy is aware of a vulnerability that affects FOX61x product versions listed in this document. Successful exploitation of this vulnerability can lead to forgery attacks potentially causing impact on confidentiality, integrity and availability for the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. Note: This is applicable only if FOX61x devices are configured to use remote RADIUS authentication.

Vulnerabilities 1

  • Critical 9.0
    CVE-2024-3596 Public exploit EPSS 15%

    RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

    RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authen…

    IETF RFC krb5 freeradius Debian Ubuntu Alpine

Revision history

  1. #2

    Initial CISA Republication of Hitachi Energy PSIRT 8DBD000225 advisory

  2. #1

    Initial public release

References