CVE-2025-52578 MEDIUM

CVE-2025-52578

Vendor Gallagher
Product High Sec End of Line Module
Weakness CWE-335
Published November 18, 2025
Last update November 19, 2025
View on NVD All CVEs

CVSS base score

5.7/10
Attack vector Physical
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.

Key dates

02Disclosure timeline

November 18, 2025 CVE published
November 19, 2025 Record updated