Volerion logoVolerion
Volerion logoVolerion

Dell ControlVault3 and ControlVault3 Plus Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A stack-based buffer overflow vulnerability has been identified in the securebio_identify function of Dell ControlVault3, versions prior to 5.15.10.14, and Dell ControlVault3 Plus, versions prior to 6.2.26.36. This vulnerability allows for arbitrary code execution, as an attacker can send a specially crafted malicious cv_object through an API call to exploit the issue.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

Users can update to Dell ControlVault3 version 5.15.10.14 or later, or Dell ControlVault3 Plus version 6.2.26.36 or later. For specific update instructions, visit the Dell Drivers & Downloads site.

Added: Jun 13, 2025, 9:24 PM
Updated: Jun 13, 2025, 9:24 PM

Vulnerability Rating

Custom Algorithm
spread
5.4
impact
7.5
exploitability
3.3
remediation
7.7
relevance
0.2
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.