Threat database

OMICRON StationScout before version 3.05 has a cryptographic timing side-channel vulnerability in its backend authentication. This flaw may allow unauthenticated attackers to forge valid credentials, bypass authentication and authorization, and impersonate legitimate clients. Successful exploitation can lead to full access to system configuration, enabling modification or unauthorized changes to system parameters and injection of network traffic.

OMICRON StationGuard version 4.00 has an improper input validation vulnerability in its IEC 61850 Sampled Values frame processing. A specially crafted Sampled Values frame can cause the affected process to terminate, disrupting alert processing for this traffic type. The overall system and other traffic processing remain unaffected. The process automatically restarts after termination, and the failure is immediately reported to the user. The vulnerability has a low severity score and no known exploits in the wild.

OMICRON StationGuard before version 4.10 has a cryptographic timing side-channel vulnerability in its backend authentication mechanism. This flaw may allow an unauthenticated attacker to forge valid credentials, bypass authentication and authorization, and impersonate legitimate clients. Successful exploitation grants full access to system configuration, enabling unauthorized modification or reset of system parameters.