CVE-2025-29985 - Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent (CAVA)

Back Back to CVE browser

MEDIUM

Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent (CAVA)

Published Apr 8, 2025

6.5

MEDIUM

CVSS 3.1

EPSS 0.27%

Description

Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent (CAVA). An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Affected products

Vendor Dell Product Common Event Enabler Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <9.0.0.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

Common Event Enabler

unaffected

Version	Status	Constraints
-	affected	<9.0.0.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-1188

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-10322
Advisory
https://www.dell.com/support/kbdoc/en-us/000303931/dsa-2025-158-security-update-for-dell-common-event-enabler-vulnerabilities
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-10322		Advisory
https://www.dell.com/support/kbdoc/en-us/000303931/dsa-2025-158-security-update-for-dell-common-event-enabler-vulnerabilities		vendor-advisoryVendor Advisory