Skip to content
OpenAdvisories
Low · 2.4 CVE-2025-64734 EUVD-2025-197912GHSA-r4wh-whpg-rc2q

Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to p…

Published Nov 18, 2025 · Updated Nov 19, 2025 · Assigned by Gallagher

Description

Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry.

This issue affects Command Centre Server:

9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)),  all versions of 9.00 and prior.

Affected products

VendorProductAffectedFixed
Gallagher T21 Reader ≤ 9.00, 9.30 – < vCR9.30.251028a, 9.20 – < vCR9.20.251028a, 9.10 – < vCR9.10.251028a vCR9.30.251028a

References