CVE-2026-16315 describes a timing side-channel vulnerability (CWE-208) in OMICRON StationGuard's backend authentication prior to version 4.10. The vulnerability arises from observable timing discrepancies during cryptographic operations, which an unauthenticated attacker can exploit to forge authentication credentials. This bypasses normal authentication and authorization controls, allowing the attacker to impersonate legitimate clients and gain full control over system configuration settings.

An attacker exploiting this vulnerability can gain unauthorized full access to the system configuration of OMICRON StationGuard. This includes the ability to modify, reset, or alter system parameters without authorization, potentially compromising the integrity and security of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time. Users should monitor OMICRON electronics GmbH advisories for updates and apply any forthcoming patches promptly.