Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Oberon microsystems AG Clear all filters
TI-2026-13752 CVE-2026-16458 · GHSA-pfwq-9x97-jv4q

Timing side-channel in RSA PKCS#1 v1.5 decryption in ocrypto

Priority LOW 25

Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.0.0 and prior to 4.0.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt op…

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00091 Published 2026-08-13 Fixed in 4.0.1 CWE-208
TI-2026-13753 CVE-2026-16459 · GHSA-f34q-f47h-v25c

Timing side-channel in RSA PKCS#1 v1.5 decryption in Oberon PSA Crypto

Priority LOW 25

Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5…

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00091 Published 2026-08-13 Fixed in 2.1.1 CWE-208
TI-2025-08313 CVE-2025-9071 · GHSA-5h27-5x9j-ffpx

Insecure RSA-OAEP implementation with all-zero seed for padding in Oberon PSA Crypto

Priority LOW 11

Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG’s Oberon PSA Crypto library in all versions up to 1.5.1, results in deterministic RSA and thus in a…

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00175 Published 2025-08-29 No fix listed CWE-780
TI-2025-06725 CVE-2025-7383 · GHSA-qwf7-j8g6-3hxv

Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in Oberon PSA Crypto library

Priority LOW 25

Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 1.5.1 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS#7 d…

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00089 Published 2025-08-29 No fix listed CWE-208
TI-2025-06433 CVE-2025-7071 · GHSA-fw6m-5fq2-8fqr

Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto library

Priority LOW 25

Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.1.0 and prior to 3.9.2 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS#7 decrypt ope…

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.0009 Published 2025-08-29 No fix listed CWE-208