Skip to content
Sign in
8.7 High

CVE-2025-31649 A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior…

Description

A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to execute priviledged operation. An attacker can issue an api call to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
BCM5820X Versions not published
ControlVault3 5.15 earliest → < 5.15.14.19 5.15.14.19
ControlVault3 Plus 6.2 earliest → < 6.2.36.47 6.2.36.47

Other CVEs of BCM5820X

The 13 CVEs of BCM5820X →
CVE-2025-31361 A privilege escalation vulnerability exists in the ControlVault WBDI Driver WBIO_USH_ADD_RECORD functionality of Dell… 8.7 High CVE-2025-36463 Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter… 7.3 High CVE-2025-36462 Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter… 7.3 High CVE-2025-36461 Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter… 7.3 High
Track this CVE