CVE-2025-64734

Published: Nov 18, 2025Modified: Jun 17, 2026Deferred

2.4

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 0.9 / Impact: 1.4

Source: disclosures@gallagher.com (Secondary)

Description

Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.

Related CWEs

CWE-772

Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

References (1)

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-64734

Source: disclosures@gallagher.com

Timeline

No history available yet.