CVE-2025-64734
Last modified
CVE-2025-64734 is a low-severity vulnerability rated 2.4/10 on the CVSS scale. Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.
Metrics
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-64734?
How severe is CVE-2025-64734?
How do I fix CVE-2025-64734?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-64725Weblate is a web based localization tool. In versions prior …9.8
- CVE-2025-64726Socket Firewall is an HTTP/HTTPS proxy server that intercept…7.3
- CVE-2025-64729The vulnerability, if exploited, could allow an authenticate…8.2
- CVE-2025-6473A vulnerability, which was classified as problematic, was fo…6.1
- CVE-2025-64730Cross-site scripting vulnerability exists in SNC-CX600W all …6.1
- CVE-2025-64733An out-of-bounds read vulnerability exists in the EMF functi…7.1
- CVE-2025-64735An out-of-bounds read vulnerability exists in the EMF functi…7.1
- CVE-2025-64736An out-of-bounds read vulnerability exists in the ABF parsin…7.1
- CVE-2025-64738External control of file name or path in Zoom Workplace for …5.5
- CVE-2025-64739External control of file name or path in certain Zoom Client…7.5
- CVE-2025-6474A vulnerability has been found in code-projects Inventory Ma…9.8
- CVE-2025-64740Improper verification of cryptographic signature in the inst…7.8
Are you affected by CVE-2025-64734?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST