Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-31361

Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter privilege escalation vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
talos

Description

A privilege escalation vulnerability exists in the ControlVault WBDI Driver WBIO_USH_ADD_RECORD functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to privilege escalation. An attacker can issue an api call to trigger this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Broadcom BCM5820X

Default version status: unaffected

  • NAaffected

Dell ControlVault3

Default version status: unaffected

  • 0 to < 5.15.14.19affected

Dell ControlVault3 Plus

Default version status: unaffected

  • 0 to < 6.2.36.47affected

References