CVE-2026-16315

HighCVSS 8.7

Published: 06/08/2026(UTC)Updated: 06/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Summary

Cryptographic timing side-channel vulnerability in the backend authentication mechanism of OMICRON StationGuard before version 4.10. Allows an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients. An attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters.

Risk Assessment

Risk of full system compromise, leading to unauthorized configuration changes or integrity violation.

Recommendation

Update OMICRON StationGuard to version 4.10 or later, which includes the fix for this vulnerability.

Other vulnerabilities in OMICRON StationGuard

CVE-2026-16316Medium
OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values (SV) frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect overall system availability or the processing of other traffic types, and the process is automatically restarted, and the failure is immediately reported to the user.

Original NVD description (English source)

OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate clients. An attacker can gain full access to the system configuration, allowing modification, reset, or unauthorized alteration of system parameters.