Vulnerability · Published Jul 10, 2025 · Assigned by Gallagher

CVE-2025-44003

Medium 4.3

In plain English

A medium-severity security flaw in T-Series Readers from Gallagher. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.2%top 89.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Missing Release of Resource after Effective Lifetime (CWE-772) in the Gallagher T-Series Reader allows an attacker with physical access to the reader to perform a limited denial of service when 125 kHz Card Technology is enabled. This issue affects T-Series Readers: 9.20 prior to vCR9.20.250213a (distributed in 9.20.1827 (MR2)), 9.10 prior to vCR9.10.250213a (distributed in 9.10.2692(MR5)), 9.00 prior to vCR9.00.250619a (distributed in vEL9.00.3371 (MR7)), all versions of 8.90 and prior.

Affected products (as reported)

Vendor	Product	Versions
Gallagher	T-Series Readers	0 – through 8.909.20 – before vCR9.20.250213a9.10 – before vCR9.10.250213a9.00 – before vCR9.00.250619a

Weakness: CWE-772 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-44003