An incorrect usage of seeds in the pseudo-random number generator (CWE-335) vulnerability exists in the High Sec ELM component of the Command Centre Server. This flaw may allow a sophisticated attacker with physical access to compromise internal device communications. The vulnerability affects Command Centre Server versions 9.00 and earlier, as well as versions prior to vCR9.10.251028a, vCR9.20.251028a, and vCR9.30.251028a. The CVSS 3.1 base score is 5.7, indicating a medium severity level.