CVE-2026-16315

OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients. An attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters.

CVSS v3 8.7 HIGH

8.7^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.8

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://www.omicronenergy.com/.well-known/csaf/osa-21.json

Configurations

No configuration.

History

23 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) OMICRON StationGuard antes de la versión 4.10 contiene una vulnerabilidad de canal lateral de tiempo criptográfico en el mecanismo de autenticación del backend que puede permitir a un atacante no autenticado forjar credenciales de autenticación válidas, eludir la autenticación y la autorización, e suplantar a clientes legítimos. Un atacante puede obtener acceso completo a la configuración del sistema, permitiendo la modificación, el restablecimiento o la alteración no autorizada de los parámetros del sistema.

Information

Published : 2026-08-06 14:16

Updated : 2026-10-23 21:10

NVD link : CVE-2026-16315

Mitre link : CVE-2026-16315

CVE.ORG link : CVE-2026-16315

JSON object : View

Products Affected

No product.

CWE

CWE-208

Observable Timing Discrepancy

{"id": "CVE-2026-16315", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-16315", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-06T14:44:26.820604Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "57995746-fc30-4a4d-94f6-a13d079c41f4", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.8, "exploitabilityScore": 2.2}], "cvssMetricV40": [{"type": "Secondary", "source": "57995746-fc30-4a4d-94f6-a13d079c41f4", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "UNREPORTED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "57995746-fc30-4a4d-94f6-a13d079c41f4", "affectedData": [{"vendor": "OMICRON electronics GmbH", "product": "OMICRON StationGuard", "versions": [{"status": "affected", "version": "0", "lessThan": "4.10", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-06T14:16:21.840", "references": [{"url": "https://www.omicronenergy.com/.well-known/csaf/osa-21.json", "source": "57995746-fc30-4a4d-94f6-a13d079c41f4"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "57995746-fc30-4a4d-94f6-a13d079c41f4", "description": [{"lang": "en", "value": "CWE-208"}]}], "descriptions": [{"lang": "en", "value": "OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients.\nAn attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters."}, {"lang": "es", "value": "OMICRON StationGuard antes de la versi\u00f3n 4.10 contiene una vulnerabilidad de canal lateral de tiempo criptogr\u00e1fico en el mecanismo de autenticaci\u00f3n del backend que puede permitir a un atacante no autenticado forjar credenciales de autenticaci\u00f3n v\u00e1lidas, eludir la autenticaci\u00f3n y la autorizaci\u00f3n, e suplantar a clientes leg\u00edtimos. Un atacante puede obtener acceso completo a la configuraci\u00f3n del sistema, permitiendo la modificaci\u00f3n, el restablecimiento o la alteraci\u00f3n no autorizada de los par\u00e1metros del sistema."}], "lastModified": "2026-10-23T21:10:00.157", "sourceIdentifier": "57995746-fc30-4a4d-94f6-a13d079c41f4"}