HIGH
Dell ControlVault3 CvManager_SBI buffer overflow vulnerability
Published Nov 17, 2025
8.8
HIGHCVSS 3.1
EPSS 0.31%
Description
A buffer overflow vulnerability exists in the CvManager_SBI functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to a arbitrary code execution. An attacker can issue an api call to trigger this vulnerability.
Affected products
-
Affected
- NA
-
Affected
- ≥ 0, < 5.15.14.19
-
Affected
- ≥ 0, < 6.2.36.47
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Broadcom | BCM5820X | unaffected | Affected
|
| Dell | ControlVault3 | unaffected | Affected
|
| Dell | ControlVault3 Plus | unaffected | Affected
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner talos
Published Nov 17, 2025
Updated Feb 26, 2026
Reserved Apr 29, 2025
Link CVE-2025-32089
CISA Vulnrichment
Updated Nov 19, 2025
Red Hat
No data
GitHub
No data