CVE-2025-52578
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-11-18
Last updated on: 2025-11-18
Assigner: Gallagher Group Ltd.
Description
Description
Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications.
This issue affects Command Centre Server:
9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| gallagher | command_centre_server | 9.00 |
| gallagher | command_centre_server | 9.20 |
| gallagher | command_centre_server | 9.30 |
| gallagher | command_centre_server | 9.10 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-335 | The product uses a Pseudo-Random Number Generator (PRNG) but does not correctly manage seeds. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves incorrect usage of seeds in a pseudo-random number generator within the High Sec ELM. It may allow a sophisticated attacker with physical access to compromise internal device communications.
How can this vulnerability impact me? :
An attacker with physical access could exploit this vulnerability to compromise the internal communications of the device, potentially leading to unauthorized access or manipulation of sensitive data transmitted within the device.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70