CVE-2025-52578
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-52578
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
PRNG种子错误
Source: NVD (National Vulnerability Database)
Vulnerability Title
Gallagher HBUS Devices 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Gallagher HBUS Devices是新西兰Gallagher公司的一个门禁与警报外设设备系列。 Gallagher HBUS Devices存在安全漏洞，该漏洞源于伪随机数生成器中种子使用不当，可能导致破坏内部设备通信。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Gallagher | High Sec End of Line Module | 0 ~ 9.00 | - |
II. Public POCs for CVE-2025-52578
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-52578
请登录查看更多情报信息。
Same Patch Batch · Gallagher · 2025-11-18 · 3 CVEs total
| CVE-2025-52457 | 5.7 MEDIUM | Gallagher HBUS Devices 安全漏洞 |
| CVE-2025-64734 | 2.4 LOW | Gallagher T-Series Reader 安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-335
- CVE-2026-11702
Bytes::Random::Secure::Tiny versions through 1.011 for Perl - CVE-2026-11625
Bytes::Random::Secure versions through 0.29 for Perl share i - CVE-2026-41564
CryptX versions before 0.088 for Perl do not reseed the Cryp - CVE-2026-3503
Fault injection attack with ML-DSA and ML-KEM on ARM - CVE-2025-27580
NIH BRICS 安全漏洞
V. Comments for CVE-2025-52578
No comments yet