PT-2025-47242 · Unknown · Command Centre Server+1

Published 2025-11-18 · Updated 2025-11-18 · CVE-2025-64734

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Command Centre Server versions prior to 9.30.251028a Command Centre Server versions prior to 9.20.251028a Command Centre Server versions prior to 9.10.251028a Command Centre Server versions 9.00 and earlier

Description A flaw exists in the T21 Reader related to improper resource management, specifically a missing release of resources after their effective lifetime. This allows an attacker with physical access to the reader to cause a denial-of-service condition, preventing cardholders from using the reader for access.

Recommendations Update Command Centre Server to version 9.30.251028a or later. Update Command Centre Server to version 9.20.251028a or later. Update Command Centre Server to version 9.10.251028a or later. Update Command Centre Server to a version later than 9.00.

Fix

DoS

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

CVE-2025-64734

Affected Products

Command Centre Server

T21 Reader

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-64734 · Security Note
• https://t.me/CVEtracker/37575 · Telegram Post
• https://twitter.com/CVEnew/status/1990631581028118946 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1990697858207514654 · Twitter Post
• https://t.me/cveNotify/143143 · Telegram Post
• https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2025-64734 · Note