CVE-2025-64734

State: Published
Severity: 2.4 Low
Published: Nov 18, 2025
Updated: Nov 19, 2025
Reserved: Nov 11, 2025

Description

Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry.

This issue affects Command Centre Server:

9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.

Scores

CVSS	Score	Vector	Source
3.1	2.4 Low	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	Gallagher

Weaknesses

CWE-772 Missing Release of Resource after Effective Lifetime

Affected Products

Product	Versions
T21 ReaderGallagher	9.00 and earlierAffected 9.30 to before vCR9.30.251028aAffected 9.20 to before vCR9.20.251028aAffected 9.10 to before vCR9.10.251028aAffected

References

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-64734

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.