CVE-2025-7383
Last modified
CVE-2025-7383 is a medium-severity vulnerability rated 5.9/10 on the CVSS scale. Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 1.5.1 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS#7 decrypt operations.. EPSS estimates a 0.08% chance of exploitation in the next 30 days.
Description
Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 1.5.1 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS#7 decrypt operations.
Metrics
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-7383?
How severe is CVE-2025-7383?
How do I fix CVE-2025-7383?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-7376Windows Shortcut Following (.LNK) vulnerability in multiple …5.9
- CVE-2025-7378An improper Input Validation vulnerability allows injecting …6
- CVE-2025-7379A security bypass vulnerability allows exploitation via Reve…5.2
- CVE-2025-7380A stored Cross-Site Scripting (XSS) vulnerability exists in …4.8
- CVE-2025-7381ImpactThis is an information disclosure vulnerability origin…5.3
- CVE-2025-7382A command injection vulnerability in WebAdmin of Sophos Fire…8.8
- CVE-2025-7384The Database for Contact Form 7, WPforms, Elementor forms pl…9.8
- CVE-2025-7385Input from search query parameter in GOV CMS is not sanitize…9.3
- CVE-2025-7386Information exposure vulnerability in Hitachi Storage Naviga…6.8
- CVE-2025-7387The Lana Downloads Manager plugin for WordPress is vulnerabl…5.5
- CVE-2025-7388It was possible to perform Remote Command Execution (RCE) vi…8.4
- CVE-2025-7389A vulnerability in the AdminServer component of OpenEdge on …8.2
Are you affected by CVE-2025-7383?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST