Omicron Stationscout
Monthly
Cryptographic timing side-channel in OMICRON StationScout before version 3.05 allows unauthenticated network attackers to forge valid authentication credentials, bypass authentication and authorization entirely, and impersonate legitimate clients - granting full access to system configuration and the ability to inject traffic into the connected substation network. The CVSS 4.0 vector confirms unauthenticated remote exploitability (PR:N, AV:N) with high complexity (AC:H) reflecting the statistical measurement precision timing attacks require, and scope-change indicators (SC:H/SI:H/SA:H) capture downstream risk to connected OT systems. No public exploit has been identified at time of analysis, and the CVSS 4.0 supplemental metric E:U corroborates absence of confirmed exploitation.
Cryptographic timing side-channel in OMICRON StationScout before version 3.05 allows unauthenticated network attackers to forge valid authentication credentials, bypass authentication and authorization entirely, and impersonate legitimate clients - granting full access to system configuration and the ability to inject traffic into the connected substation network. The CVSS 4.0 vector confirms unauthenticated remote exploitability (PR:N, AV:N) with high complexity (AC:H) reflecting the statistical measurement precision timing attacks require, and scope-change indicators (SC:H/SI:H/SA:H) capture downstream risk to connected OT systems. No public exploit has been identified at time of analysis, and the CVSS 4.0 supplemental metric E:U corroborates absence of confirmed exploitation.