Pseudo-Random Number Generator Flaw in High Sec ELM Affects Gallagher Command Centre
CVE-2025-52578

5.7MEDIUM

Key Information:

Vendor

Gallagher

Status
High Sec End Of Line Module
Vendor
CVE Published:
18 November 2025

What is CVE-2025-52578?

A vulnerability exists in Gallagher's Command Centre Server due to incorrect usage of seeds in the pseudo-random number generator. This flaw may enable an attacker with physical access to the affected devices to compromise internal communications, potentially allowing unauthorized data access or manipulation.

Affected Version(s)

High Sec End of Line Module 0 <= 9.00

High Sec End of Line Module 9.30

High Sec End of Line Module 9.20

References

https://security.gallagher.com/en-NZ/Security-Advisories/...

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.