PT-2025-25445 · Dell · Dell Controlvault3 Plus+1

Philippe Laulheret · Published 2025-06-13 · Updated 2025-08-08 · CVE-2025-24311

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell ControlVault3 versions prior to 5.15.10.14 Dell ControlVault3 Plus versions prior to 6.2.26.36

Description An out-of-bounds read vulnerability exists in the cv send blockdata functionality. A specially crafted ControlVault API call can lead to an information leak. An attacker can issue an API call to trigger this vulnerability.

Recommendations Dell ControlVault3 versions prior to 5.15.10.14: Upgrade to version 5.15.10.14 or later. Dell ControlVault3 Plus versions prior to 6.2.26.36: Upgrade to version 6.2.26.36 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-07626

CVE-2025-24311

Affected Products

Dell Controlvault3

Dell Controlvault3 Plus

References · 11

• https://bdu.fstec.ru/vul/2025-07626 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-24311 · Security Note
• https://t.me/true_secator/7303 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1933647094029451605 · Twitter Post
• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2127 · Note
• https://twitter.com/CVEnew/status/1933628569323725251 · Twitter Post
• https://twitter.com/jbhall56/status/1953080033183948808 · Twitter Post
• https://t.me/cvetracker/26216 · Telegram Post
• https://dell.com/support/kbdoc/en-us/000276106/dsa-2025-053 · Note
• https://t.me/cvenotify/125693 · Telegram Post
• https://t.me/purp_sec/1013 · Telegram Post