CVE-2025-52578
Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.7
- CVSS vector
- CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- EPSS probability
- 0.15%
- CWE
- CWE-335
- Published
- 2025-11-18
- Last modified
- 2026-03-13
Affected products
- Gallagher High Sec End of Line Module
- Gallagher High Sec End of Line Module
- Gallagher High Sec End of Line Module
- Gallagher High Sec End of Line Module
Weakness type
Related vulnerabilities
- CVE-2026-11702 — Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes
- CVE-2026-11625 — Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes
- CVE-2026-41564 — CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking
- CVE-2026-3503 — Fault injection attack with ML-DSA and ML-KEM on ARM
- CVE-2025-27580 — NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates...
- CVE-2025-24783 — Apache Cocoon: continuations may not be private
- CVE-2024-55566 — ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name...
- CVE-2024-1579 — Insufficient seeding of random number generator