Gallagher HBUS Devices Observable Timing Discrepancy Vulnerability Allowing Key Extraction

A timing discrepancy vulnerability has been identified in HBUS devices, which may allow an attacker with physical access to the device to extract device-specific keys. This could potentially compromise further site security. The vulnerability arises from an observable timing discrepancy, categorized under CWE-208.

Impact

Exploitation of this vulnerability could lead to the unauthorized extraction of device-specific keys, potentially compromising the security of the site.

Remediation

Users are advised to ensure that hardware is installed correctly and to follow all steps from the hardening guide.