2.4
/ 10
LOW
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry.
This issue affects Command Centre Server:
9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.
This issue affects Command Centre Server:
9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.
Basic Information
ID
CVE-2025-64734
Source
Gallagher
Published
Nov 18, 2025 at 03:26
Affected Product
Vendor
Gallagher
Product
T21 Reader
Affected Versions
Gallagher T21 Reader 0
Gallagher T21 Reader 9.30
Gallagher T21 Reader 9.20
Gallagher T21 Reader 9.10
Gallagher T21 Reader 9.30
Gallagher T21 Reader 9.20
Gallagher T21 Reader 9.10