CVE-2025-9071

Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG’s Oberon PSA Crypto library in all versions up to 1.5.1, results in deterministic RSA and thus in a loss of confidentiality for guessable messages, recognition of repeated messages, and loss of security proofs.

CVSS

No CVSS.

References

Link	Resource
https://www.oberon.ch/security-advisories/cve-2025-9071/

Configurations

No configuration.

History

18 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) El uso erróneo de una semilla de ceros para el relleno RSA-OEAP en lugar de los bytes aleatorios generados, en la biblioteca Oberon PSA Crypto de Oberon microsystems AG en todas las versiones hasta la 1.5.1, resulta en un RSA determinista y, por lo tanto, en una pérdida de confidencialidad para mensajes predecibles, el reconocimiento de mensajes repetidos y la pérdida de pruebas de seguridad.

Information

Published : 2025-08-29 10:15

Updated : 2026-10-18 21:10

NVD link : CVE-2025-9071

Mitre link : CVE-2025-9071

CVE.ORG link : CVE-2025-9071

JSON object : View

Products Affected

No product.

CWE

CWE-780

Use of RSA Algorithm without OAEP

{"id": "CVE-2025-9071", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-9071", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-08-29T13:45:26.977528Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "vulnerability@ncsc.ch", "cvssData": {"Safety": "NEGLIGIBLE", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 2.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "LOW", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:X/R:X/V:X/RE:L/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "LOW", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "vulnerability@ncsc.ch", "affectedData": [{"vendor": "Oberon microsystems AG", "product": "Oberon PSA Crypto", "versions": [{"status": "affected", "changes": [{"at": "rsa_oaep_padding.patch", "status": "unaffected"}], "version": "1.0.0", "versionType": "custom", "lessThanOrEqual": "1.5.1"}], "defaultStatus": "unaffected"}]}], "published": "2025-08-29T10:15:33.020", "references": [{"url": "https://www.oberon.ch/security-advisories/cve-2025-9071/", "source": "vulnerability@ncsc.ch"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "vulnerability@ncsc.ch", "description": [{"lang": "en", "value": "CWE-780"}]}], "descriptions": [{"lang": "en", "value": "Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG\u2019s Oberon PSA Crypto library in all versions up to 1.5.1, results in deterministic RSA and thus in a loss of confidentiality for guessable messages, recognition of repeated messages, and loss of security proofs."}, {"lang": "es", "value": "El uso err\u00f3neo de una semilla de ceros para el relleno RSA-OEAP en lugar de los bytes aleatorios generados, en la biblioteca Oberon PSA Crypto de Oberon microsystems AG en todas las versiones hasta la 1.5.1, resulta en un RSA determinista y, por lo tanto, en una p\u00e9rdida de confidencialidad para mensajes predecibles, el reconocimiento de mensajes repetidos y la p\u00e9rdida de pruebas de seguridad."}], "lastModified": "2026-10-18T21:10:00.120", "sourceIdentifier": "vulnerability@ncsc.ch"}