OMICRON StationScout before version 3.05 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credent…
CVSS 4.0HIGH 8.3·Network·No auth·No interaction·EPSS 0.00441·Published 2026-08-06·Fixed in 3.05CWE-208
OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication mechanism that may allow an unauthenticated attacker to forge valid authentication credent…
CVSS 4.0HIGH 8.1·Network·No auth·No interaction·EPSS 0.00418·Published 2026-08-06·Fixed in 4.10CWE-208