Medium severity5.7NVD Advisory· Published Nov 18, 2025· Updated Apr 15, 2026
CVE-2025-52457
CVE-2025-52457
Description
Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially compromising further site security.
This issue affects Command Centre Server:
9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: >=9.00, <9.10.4135 (MR8); >=9.10, <9.20.3265 (MR5); >=9.20, <9.30.2881 (MR3); 9.00 and prior
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.