Skip to content
Connect AISign inSign up free
CVE-2025-250508.8HighCWE-787

CVE-2025-25050: Dell ControlVault3/ControlVault3 Plus cv_upgrade_sensor_firmware out-of-bounds write vulnerability

Broadcom · BCM5820X

Vendor fix available · Affected: Broadcom BCM5820X · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

2.1%probability of exploitation in the next 30 days
81st percentile
050100

Higher than 81% of scored CVEs

8.8HighCVSS 3.1
LowHigh

DescriptionCVE.org

An out-of-bounds write vulnerability exists in the cv_upgrade_sensor_firmware functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault 3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an out-of-bounds write. An attacker can issue an API call to trigger this vulnerability.

Affected products3

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Broadcom · BCM5820XVersions not stated
  • Dell · ControlVault3before 5.15.10.14
  • Dell · ControlVault3 Plusbefore 6.2.26.36

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Broadcom
Published
June 2025

CoverageNo articles yet

No CyberSIXT article names CVE-2025-25050 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References