Read the docs
TI-2025-22811 Aliases CVE-2025-31649GHSA-25rx-r3wr-mpvr

Dell ControlVault3 ControlVault WBDI Driver hard-coded password vulnerability

Priority LOW 39CWE-908Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to execute priviledged operation. An attacker can issue an api call to trigger this vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00245 15th percentileScored 2026-11-07
Fix Fixed ControlVault3 (Dell): 5.15.14.19ControlVault3 Plus (Dell): 6.2.36.47

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BroadcomBCM5820XNA—No fix listedCNA
DellControlVault3before 5.15.14.195.15.14.19Patch availableCNA
DellControlVault3 Plusbefore 6.2.36.476.2.36.47Patch availableCNA
  • BCM5820X VendorBroadcom Affected NA Fixed in — No fix listed CNA
  • ControlVault3 VendorDell Affected before 5.15.14.19 Fixed in 5.15.14.19 Patch available CNA
  • ControlVault3 Plus VendorDell Affected before 6.2.36.47 Fixed in 6.2.36.47 Patch available CNA

Remediation

  • Fix · CNA ControlVault3 (Dell) Fixed in 5.15.14.19
  • Fix · CNA ControlVault3 Plus (Dell) Fixed in 6.2.36.47

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Dell ControlVault3, ControlVault3 Plus 5.15.14.19, 6.2.36.47

    8 records Highest priority Priority MEDIUM 2 MEDIUM, 6 LOW

    Other records, highest priority first

    • TI-2025-24873 Dell ControlVault3 CvManager buffer overflow vulnerabilityPriority MEDIUM 40
    • TI-2025-23195 Dell ControlVault3 CvManager_SBI buffer overflow vulnerabilityPriority MEDIUM 40
    • TI-2025-22551 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter privilege escalation vulnerabilityPriority LOW 39
    Show all 8 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-31649
  2. 2026-10-03 Alias added: GHSA-25rx-r3wr-mpvr

References

Other 2

  • TI-2026-42442 vCenter directory-traversal vulnerability KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-24610 Out-of-bounds write in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-01178 Code injection in Spring Framework KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
  • TI-2025-01721 Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 KEVCVSS 4.0HIGH 8.6
  • TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
See all 873 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences