PT-2025-28973 · Gallagher · Gallagher T-Series Reader

Published 2025-07-10 · Updated 2025-07-10 · CVE-2025-44003

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Gallagher T-Series Reader versions prior to 9.20.250213a Gallagher T-Series Reader versions prior to 9.10.250213a Gallagher T-Series Reader versions prior to 9.00.250619a Gallagher T-Series Reader versions 8.90 and earlier

Description: A resource leak issue (CWE-772) in the Gallagher T-Series Reader allows an attacker with physical access to the reader to perform a limited denial of service when 125 kHz Card Technology is enabled.

Recommendations: Gallagher T-Series Reader versions prior to 9.20.250213a: Update to version 9.20.250213a or later. Gallagher T-Series Reader versions prior to 9.10.250213a: Update to version 9.10.250213a or later. Gallagher T-Series Reader versions prior to 9.00.250619a: Update to version 9.00.250619a or later. Gallagher T-Series Reader versions 8.90 and earlier: Update to a version later than 8.90.

Fix

DoS

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

CVE-2025-44003

Affected Products

Gallagher T-Series Reader

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-44003 · Security Note
• https://twitter.com/VulmonFeeds/status/1943200353375195259 · Twitter Post
• https://twitter.com/CVEnew/status/1943335879306535279 · Twitter Post
• https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-44003 · Note