Observable Timing Discrepancy in HBUS Devices by Gallagher
CVE-2025-52457

5.7MEDIUM

Key Information:

Vendor

Gallagher

Status
Hbus Devices
Vendor
CVE Published:
18 November 2025

What is CVE-2025-52457?

A vulnerability in Gallagher HBUS devices allows for an observable timing discrepancy, which can be exploited by an attacker with physical access to the device. This flaw may enable the extraction of device-specific keys, posing a risk to the overall security of the site. The vulnerability affects multiple versions of the Command Centre Server, making it critical for users to ensure their systems are up-to-date to safeguard against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

HBUS Devices 0 <= 9.00

HBUS Devices 9.30

HBUS Devices 9.20

References

https://security.gallagher.com/en-NZ/Security-Advisories/...

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.