CVE-2025-44003

MEDIUM EPSS 7.1%

Published Jul 10, 202511mo ago · Modified Jun 17, 20262w ago

4.3 CVSS 3.1

Medium

Published Jul 10, 2025 11mo ago

Last Modified Jun 17, 2026 2w ago

Description

Missing Release of Resource after Effective Lifetime (CWE-772) in the Gallagher T-Series Reader allows an attacker with physical access to the reader to perform a limited denial of service when 125 kHz Card Technology is enabled. This issue affects T-Series Readers: 9.20 prior to vCR9.20.250213a (distributed in 9.20.1827 (MR2)), 9.10 prior to vCR9.10.250213a (distributed in 9.10.2692(MR5)), 9.00 prior to vCR9.00.250619a (distributed in vEL9.00.3371 (MR7)), all versions of 8.90 and prior.

CVSS Details

Base Score

4.3

Exploitability

2.8

Impact

1.4

Vector string

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector Adjacent

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality None

Integrity None

Availability Low

Threat Intelligence

EPSS Exploit Probability

7.1% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-772

References 1

security.gallagher.com https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-44003

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.