Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker…
Gallagher·CWE-335·Published 2025-11-18
Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.
Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.
La vulnerabilidad de uso incorrecto de semillas en el generador de números pseudoaleatorios (CWE-335) en el High Sec ELM puede permitir a un atacante sofisticado con acceso físico comprometer las comunicaciones internas del dispositivo. Este problema afecta al Command Centre Server: Versiones 9.30 anteriores a vCR9.30.251028a (distribuido en 9.30.2881 (MR3)), Versiones 9.20 anteriores a vCR9.20.251028a (distribuido en 9.20.3265 (MR5)), Versiones 9.10 anteriores a vCR9.10.251028a (distribuido en 9.10.4135 (MR8)), todas las versiones de 9.00 y anteriores.
| Version | Type | Source | Base | Exp | Impact | Vector |
|---|---|---|---|---|---|---|
| 3.1 | Primary | cve.org | 5.7 | — | — | CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
| 3.1 | Secondary | NVD | 5.7 | 0.5 | 5.2 | CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |