CVE-2025-52578

Published: Nov 18, 2025Modified: Jun 17, 2026Deferred

5.7

Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 0.5 / Impact: 5.2

Source: disclosures@gallagher.com (Secondary)

Description

Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.

Related CWEs

CWE-335

Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

The product uses a Pseudo-Random Number Generator (PRNG) but does not correctly manage seeds.

References (1)

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-52578

Source: disclosures@gallagher.com

Timeline

No history available yet.