CVE-2025-64734
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-11-18
Last updated on: 2025-11-18
Assigner: Gallagher Group Ltd.
Description
Description
Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry.
This issue affects Command Centre Server:
9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| gallagher | command_centre_server | 9.00 |
| gallagher | command_centre_server | 9.20 |
| gallagher | command_centre_server | 9.30 |
| gallagher | command_centre_server | 9.10 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-772 | The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader. It allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, which prevents cardholders from badging for entry.
How can this vulnerability impact me? :
The vulnerability can impact you by causing a denial-of-service condition on the affected T21 Reader, preventing authorized cardholders from badging for entry and potentially disrupting access control operations.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70