Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2025-52457

Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially compromising further s

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Gallagher

Description

Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially compromising further site security. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Gallagher HBUS Devices

Default version status: unaffected

  • 0 to ≤ 9.00affected
  • 9.30 to < vCR9.30.251028aaffected
  • 9.20 to < vCR9.20.251028aaffected
  • 9.10 to < vCR9.10.251028aaffected

References