24 matches found
EUVD-2026-53921
OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate...
PT-2026-68491
Name of the Vulnerable Software and Affected Versions OMICRON StationGuard version 4.00 Description Improper input validation occurs during the processing of IEC 61850 Sampled Values SV frames. A specially crafted SV frame can cause the responsible process to terminate, which disrupts the...
PT-2026-68490
Name of the Vulnerable Software and Affected Versions OMICRON StationGuard versions prior to 4.10 Description A cryptographic timing side-channel vulnerability exists in the backend authentication mechanism. This flaw allows an unauthenticated attacker to forge valid authentication credentials,...
CVE-2026-16316: Improper Input Validation
OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values SV frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect...
CVE-2026-16315: Observable Timing Discrepancy
OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credentials, bypass authentication and authorization, and impersonate legitimate...
EUVD-2023-32279
Malicious code in bioql PyPI...
EUVD-2023-32278
Malicious code in bioql PyPI...
CVE-2023-28611
Incorrect authorization in OMICRON StationGuard 1.10 through 2.20 and StationScout 1.30 through 2.20 allows an attacker to bypass intended access restrictions...
CVE-2023-28610
The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified firmware update image. This allows a remote attacker to gain root access to the system...
CVE-2021-30464
OMICRON StationGuard before 1.10 allows remote attackers to cause a denial of service connectivity outage via crafted tcp/20499 packets to the CTRL Ethernet port...
CVE-2023-28611
Incorrect authorization in OMICRON StationGuard 1.10 through 2.20 and StationScout 1.30 through 2.20 allows an attacker to bypass intended access restrictions...
CVE-2023-28611
Incorrect authorization in OMICRON StationGuard 1.10 through 2.20 and StationScout 1.30 through 2.20 allows an attacker to bypass intended access restrictions...
Design/Logic Flaw
The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified firmware update image. This allows a remote attacker to gain root access to the system...
CVE-2023-28610
The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified firmware update image. This allows a remote attacker to gain root access to the system...
CVE-2023-28611
CVE-2023-28611 affects OMICRON StationGuard (versions 1.10–2.20) and StationScout (1.30–2.20). Root cause described as misauthorization/incorrect authorization that allows bypassing access controls. Public references (e.g., CNNVD, Red Hat, PT- security) corroborate the issue and list affected ver...
CVE-2023-28611: Incorrect Authorization
Incorrect authorization in OMICRON StationGuard 1.10 through 2.20 and StationScout 1.30 through 2.20 allows an attacker to bypass intended access restrictions...
CVE-2023-28610: Improper Verification of Cryptographic Signature
The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified firmware update image. This allows a remote attacker to gain root access to the system...
CVE-2023-28611
Incorrect authorization in OMICRON StationGuard 1.10 through 2.20 and StationScout 1.30 through 2.20 allows an attacker to bypass intended access restrictions...
CVE-2023-28610
The CVE-2023-28610 entry affects OMICRON StationGuard and StationScout prior to version 2.21. The flaw arises in the update process, where a modified firmware image can be supplied to remote-update functionality, allowing a remote attacker to gain root access to the system. According to the sourc...