Description (CNA)
An arbitrary free vulnerability exists in the cv_close functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an arbitrary free. An attacker can forge a fake session to trigger this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Broadcom / BCM5820X | affected NA |
| Dell / ControlVault3 | affected 0 before 5.15.10.14 |
| Dell / ControlVault3 Plus | affected 0 before 6.2.26.36 |
CWE
CWE-763
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.