Read the docs
TI-2025-18056 Aliases CVE-2025-24311GHSA-5v6x-pfc7-q9g6

Dell ControlVault3/ControlVault3 Plus cv_send_blockdata out-of-bounds read vulnerability

Priority MEDIUM 40CWE-125Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

An out-of-bounds read vulnerability exists in the cv_send_blockdata functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an information leak. An attacker can issue an API call to trigger this vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01997 80th percentileScored 2026-11-07
Fix Fixed ControlVault3 (Dell): 5.15.10.14ControlVault3 Plus (Dell): 6.2.26.36

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BroadcomBCM5820XNA—No fix listedCNA
DellControlVault3before 5.15.10.145.15.10.14Patch availableCNA
DellControlVault3 Plusbefore 6.2.26.366.2.26.36Patch availableCNA
  • BCM5820X VendorBroadcom Affected NA Fixed in — No fix listed CNA
  • ControlVault3 VendorDell Affected before 5.15.10.14 Fixed in 5.15.10.14 Patch available CNA
  • ControlVault3 Plus VendorDell Affected before 6.2.26.36 Fixed in 6.2.26.36 Patch available CNA

Remediation

  • Fix · CNA ControlVault3 (Dell) Fixed in 5.15.10.14
  • Fix · CNA ControlVault3 Plus (Dell) Fixed in 6.2.26.36

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Dell ControlVault3, ControlVault3 Plus 5.15.10.14, 6.2.26.36

    5 records Highest priority Priority MEDIUM 5 MEDIUM

    Other records, highest priority first

    • TI-2025-18623 Dell ControlVault3/ControlVault3 Plus securebio_identify stack-based buffer overflow vulnerabilityPriority MEDIUM 46
    • TI-2025-18884 Dell ControlVault3/ControlVault3 Plus cv_close arbitrary free vulnerabilityPriority MEDIUM 45
    • TI-2025-18719 Dell ControlVault3/ControlVault3 Plus cv_upgrade_sensor_firmware out-of-bounds write vulnerabilityPriority MEDIUM 44
    Show all 5 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-24311
  2. 2026-10-03 Alias added: GHSA-5v6x-pfc7-q9g6

References

Other 1

  • TI-2026-42442 vCenter directory-traversal vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-24610 Out-of-bounds write in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-01178 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
  • TI-2025-01721 Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 KEVCVSS 4.0HIGH 8.6
  • TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
See all 873 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences