Observable Timing Discrepancy in HBUS Devices by Gallagher

CVE-2025-52457

What is CVE-2025-52457?

A vulnerability in Gallagher HBUS devices allows for an observable timing discrepancy, which can be exploited by an attacker with physical access to the device. This flaw may enable the extraction of device-specific keys, posing a risk to the overall security of the site. The vulnerability affects multiple versions of the Command Centre Server, making it critical for users to ensure their systems are up-to-date to safeguard against potential exploitation.

References