Advisory 2025-1588 - Dell Computer: Multiple Vulnerabilities
The CTI portal is available at the following address: https://cti-portal.telekom.net/advisories/2025-1588
Date
2025-08-06
State
2025-08-06
Risk*
Damage: MEDIUM-HIGH
Attack Probability: LOW-MEDIUM
Attack
A local attacker can exploit multiple vulnerabilities in Dell Computers in ControlVault3 in order to execute arbitrary code, to cause a Denial of Service condition and to disclose information. Depending on their position, attackers can chain these vulnerabilities together to modify Dell's ControlVault firmware, create persistent backdoors that survive operating system reinstalls, extract cryptographic keys, execute arbitrary code, and bypass fingerprint authentication.
* The probability of an attack is determined by the attacker's motivation, the necessary expend and the possibilities for an attack. The damage probability is determined by the expend needed to resolute the attack and probable indirecte consequences of an attack for business processes. Telekom Security assumes worst case scenarios.
Copyright © 1999-2025 Deutsche Telekom Security GmbH. All rights reserved. Reproduction and distribution of this publication in any form - even in parts - without prior written permission is forbidden.
The information contained herein has been obtained from sources believed to be reliable and trusted or have been verified. Telekom Security can take liability for completeness, accuracy and correctness only in so far, as gross negligence or intention create liability. Any liability beyond it, in particular possible damages resulting from using or non-usability of the information contained herein, is excluded.