CVE-2025-44003 — Gallagher / T-Series Readers

Description (CNA)

Missing Release of Resource after Effective Lifetime (CWE-772) in the Gallagher T-Series Reader allows an attacker with physical access to the reader to perform a limited denial of service when 125 kHz Card Technology is enabled. This issue affects T-Series Readers: 9.20 prior to vCR9.20.250213a (distributed in 9.20.1827 (MR2)), 9.10 prior to vCR9.10.250213a (distributed in 9.10.2692(MR5)), 9.00 prior to vCR9.00.250619a (distributed in vEL9.00.3371 (MR7)), all versions of 8.90 and prior.

Affected (CNA)

Vendor / product	Versions
Gallagher / T-Series Readers	affected 0 through 8.90; affected 9.20 before vCR9.20.250213a; affected 9.10 before vCR9.10.250213a; affected 9.00 before vCR9.00.250619a

CWE

CWE-772

References

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-44003

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.