CVE-2025-44003

State: Published
Severity: 4.3 Medium
Published: Jul 10, 2025
Updated: Jul 10, 2025
Reserved: Jun 17, 2025

Description

Missing Release of Resource after Effective Lifetime (CWE-772) in the Gallagher T-Series Reader allows an attacker with physical access to the reader to perform a limited denial of service when 125 kHz Card Technology is enabled.

This issue affects T-Series Readers: 9.20 prior to vCR9.20.250213a (distributed in 9.20.1827 (MR2)), 9.10 prior to vCR9.10.250213a (distributed in 9.10.2692(MR5)), 9.00 prior to vCR9.00.250619a (distributed in vEL9.00.3371 (MR7)), all versions of 8.90 and prior.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	Gallagher

Weaknesses

CWE-772 Missing Release of Resource after Effective Lifetime

Affected Products

Product	Versions
T-Series ReadersGallagher	8.90 and earlierAffected 9.20 to before vCR9.20.250213aAffected 9.10 to before vCR9.10.250213aAffected 9.00 to before vCR9.00.250619aAffected

References

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-44003

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.