Researchers Reveal ReVault Attack Targeting Dell ControlVault3 Firmware in 100+ Laptop Models

🗓️ 09 Aug 2025 18:55:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 6 Views

Flaws in Dell ControlVault3 firmware enable login bypass, key theft, and persistence after OS reinstall.

Reporter	Title	Published	Views	Family All 60
BDU FSTEC	The vulnerability of the cvhDecapsulateCmd() function in the Dell ControlVault3 security driver package allows a attacker to execute arbitrary code.	23 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cv_upgrade_sensor_firmware() function in the Dell ControlVault3 security driver package allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	23 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the securebio_identify() function in the Dell ControlVault3 security management driver allows a attacker to execute arbitrary code.	23 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cv_close() function in the Dell ControlVault3 security driver package allows a attacker to execute arbitrary code or cause a service failure.	26 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the cv_send_blockdata() function in the Dell ControlVault3 security driver package allows a attacker to disclose protected information.	26 Jun 202500:00	–	bdu_fstec
Circl	CVE-2025-24311	13 Jun 202521:36	–	circl
Circl	CVE-2025-24919	13 Jun 202522:37	–	circl
Circl	CVE-2025-24922	13 Jun 202521:35	–	circl
Circl	CVE-2025-25050	13 Jun 202521:36	–	circl
Circl	CVE-2025-25215	13 Jun 202521:36	–	circl

10 Aug 2025 08:12Current

9.1High risk

Vulners AI Score9.1

CVSS 3.18.8

EPSS0.02647

SSVC

dell controlvault3 firmware login bypass cryptographic keys persistence os reinstall firmware implants black hat