CVE-2025-64734 — Gallagher / T21 Reader

Description (CNA)

Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.

Affected (CNA)

Vendor / product	Versions
Gallagher / T21 Reader	affected 0 through 9.00; affected 9.30 before vCR9.30.251028a; affected 9.20 before vCR9.20.251028a; affected 9.10 before vCR9.10.251028a

CWE

CWE-772

References

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-64734

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.