Skip to content
OpenAdvisories
Critical ICSA-26-160-01 1 CVE

Schneider Electric Modicon Network Managed Switches

Published Apr 14, 2026 · Updated Jun 9, 2026 · Revision 2

Vendor: Schneider Electric Product: Connexium Managed Switches Product: Modicon Managed Switches Product: Modicon Redundancy Switches

Summary

Schneider Electric is aware of a RADIUS protocol vulnerability affecting its Modicon Network Managed Switch product.
The Modicon Network Managed Switch product provides connectivity for multiple Ethernet devices, network management, enhanced cyber security and more advanced switching features.
Failure to apply the mitigation provided below may risk forgery attacks in RADIUS Protocol, which could result in modification of any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response which could result in the possibility of denial of service and loss of confidentiality, integrity of the devices connected to the switch.

Vulnerabilities 1

  • Critical 9.0
    CVE-2024-3596 Public exploit EPSS 15%

    RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

    RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authen…

    IETF RFC krb5 freeradius Debian Ubuntu Alpine

Revision history

  1. #2

    Initial CISA Republication of Schneider Electric CPCERT SEVD-2026-104-02 advisory

  2. #1

    Original Release

References