OMICRON StationGuard CVE-2026-16316

Q: What is the CVSS score of CVE-2026-16316?

CVE-2026-16316 has a CVSS 4.0 base score of 1.3 (Low). CVSS vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:A/V:X/RE:M/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-53922 LOW

Improper Input Validation (CWE-20)

2026-08-06 OMICRON

GHSA-q6gx-whx7-mv4w

Information Disclosure Omicron Stationguard Omicron Electronics Gmbh

1.3

CVSS 4.0 · Vendor: OMICRON

Severity by source

Vendor (OMICRON) PRIMARY

1.3 LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:A/V:X/RE:M/U:X

vuln.today AI

4.3 MEDIUM

Adjacent-only delivery via unauthenticated SV multicast; impact is low availability on one component only, no confidentiality or integrity effect.

3.1 AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

4.0 AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (OMICRON).

CVSS VectorVendor: OMICRON

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 06, 2026 - 14:24 vuln.today

DescriptionCVE.org

OMICRON StationGuard 4.00 contains an improper input validation vulnerability in its IEC 61850 Sampled Values (SV) frame processing. A specially crafted SV frame can cause the affected process to terminate, disrupting alert processing for Sampled Values traffic. The vulnerability does not affect overall system availability or the processing of other traffic types, and the process is automatically restarted, and the failure is immediately reported to the user.

AnalysisAI

Improper input validation in OMICRON StationGuard 4.00 allows an adjacent network attacker to crash the IEC 61850 Sampled Values processing component by sending a specially crafted SV frame. The disruption is self-healing - the process restarts automatically and the failure is immediately surfaced to operators - leaving overall system availability and all other monitored traffic types unaffected. No public exploit code exists and this vulnerability is not listed in CISA KEV; the CVSS 4.0 score of 1.3 reflects the accurately bounded, minimal real-world impact.

Technical ContextAI

OMICRON StationGuard is a passive cybersecurity monitoring and intrusion detection system purpose-built for IEC 61850-based electrical substations (CPE: cpe:2.3:a:omicron_electronics_gmbh:omicron_stationguard:*:*:*:*:*:*:*:*). IEC 61850 Sampled Values (SV), defined in IEC 61850-9-2, is an unauthenticated multicast protocol used to transmit high-frequency current and voltage measurements from merging units to protection relays across the station bus. CWE-20 (Improper Input Validation) indicates the SV frame parser does not sufficiently validate frame structure or field values before processing; a malformed SV frame can therefore trigger a fault that terminates the parsing process. Because the protocol is multicast and inherently unauthenticated at the network layer, no session establishment or credential exchange is required to deliver the malformed frame.

RemediationAI

Consult the OMICRON CSAF advisory (https://www.omicronenergy.com/.well-known/csaf/osa-21.json) directly to obtain the specific patched release version, as no explicit fix version number was included in the available intelligence. As a compensating control while awaiting patch application, enforce strict Layer 2 segmentation on the IEC 61850 station bus so that only authorized merging units and protection devices can transmit SV multicast frames; this reduces the pool of potential sources to trusted infrastructure and limits the attack surface without disrupting normal substation operations. The built-in automatic process restart and immediate failure notification to operators significantly reduce residual operational risk during any exploit window.