CVE-2025-44003
Medium
Description
Missing Release of Resource after Effective Lifetime (CWE-772) in the Gallagher T-Series Reader allows an attacker with physical access to the reader to perform a limited denial of service when 125 kHz Card Technology is enabled. This issue affects T-Series Readers: 9.20 prior to vCR9.20.250213a (distributed in 9.20.1827 (MR2)), 9.10 prior to vCR9.10.250213a (distributed in 9.10.2692(MR5)), 9.00 prior to vCR9.00.250619a (distributed in vEL9.00.3371 (MR7)), all versions of 8.90 and prior.
SeverityMedium
CVSS4.3
Exploit probability—
ProductT-Series Readers
PublishedJul 10, 2025
First seenJul 10, 2025
Weakness typeCWE-772CWE-772
How to fix
Update
- Gallagher T-Series ReadersvCR9.20.250213a, vCR9.10.250213a, vCR9.00.250619a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Gallagher T-Series Readers | v ≤ 8.90, 9.20 ≤ v < vCR9.20.250213a, 9.10 ≤ v < vCR9.10.250213a, 9.00 ≤ v < vCR9.00.250619a | vCR9.20.250213a, vCR9.10.250213a, vCR9.00.250619a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.