Skip to content
CVE PROGRAM SOURCE RECORD5.7 Medium

CVE-2025-52578

Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise inter

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Gallagher

Description

Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Gallagher High Sec End of Line Module

Default version status: unaffected

  • 0 to ≤ 9.00affected
  • 9.30 to < vCR9.30.251028aaffected
  • 9.20 to < vCR9.20.251028aaffected
  • 9.10 to < vCR9.10.251028aaffected

References