The vulnerability is a timing side‑channel flaw in the RSA PKCS#1 v1.5 decryption routine of ocrypto, allowing an attacker to deduce confidential plaintext values from measured operation times. The weakness maps to CWE‑208 and CWE‑327, underscoring insecure algorithm usage and flawed implementation. An adversary who can observe timing can recover the entire message, violating confidentiality.

Oberon microsystems AG’s ocrypto library, all releases from version 3.0.0 up to, but not including, 4.0.1. No other vendors or products are listed in the CNA data.

With a CVSS score of 5.9 the issue is moderate in severity. The EPSS score is not available, and the vulnerability is not present in the CISA KEV catalog, indicating limited public exploitation data. Likely attack vectors involve an adversary able to remotely access or locally observe the timing of RSA decryption calls, such as over a network connection or through a processor‑side channel. No additional prerequisites are mentioned in the advisory, so the exploitability largely hinges on the adversary’s access to the timing information.