CVE-2025-64734
2.4
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Summary
Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry.
This issue affects Command Centre Server:
9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Gallagher | T21 Reader | 0 <= 9.00 | affected |
| Gallagher | T21 Reader | 9.30 < vCR9.30.251028a | affected |
| Gallagher | T21 Reader | 9.20 < vCR9.20.251028a | affected |
| Gallagher | T21 Reader | 9.10 < vCR9.10.251028a | affected |
Weaknesses
- CWE-772: CWE-772 Missing Release of Resource after Effective Lifetime
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.