{“lastseen”:”2025-11-26T20:05:12″,”description”:”\\n\\nCisco Talos’ Vulnerability Discovery \\u0026 Research team recently disclosed five vulnerabilities in Dell ControlVault 3 firmware and its associated Windows software, four vulnerabilities in Entr’ouvert Lasso, and one vulnerability in GL.iNet Slate AX.\\n\\nThe vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to _Cisco ‘s third-party vulnerability disclosure policy_.\\n\\nFor Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from _Snort.org_, and our latest Vulnerability Advisories are always posted on _Talos Intelligence ‘s website_.\\n\\n## **Dell vulnerabilities**\\n\\n _Discovered by Philippe Laulheret of Cisco Talos._\\n\\nThe Dell ControlVault is a hardware-based security solution designed for user authentication functions. Talos reported five vulnerabilities, as follows:\\n\\n * _TALOS-2025-2173_ (CVE-2025-31649) is a hard-coded password vulnerability. A specially crafted ControlVault API call can lead to an execution of privileged operation.\\n * _TALOS-2025-2174_ (CVE-2025-31361) is a privilege escalation vulnerability. A specially crafted WinBioControlUnit API call can lead to privilege escalation.\\n * _TALOS-2025-2175_ (CVE-2025-36460-CVE-2025-36463) covers multiple out-of-bounds read and write vulnerabilities. A specially crafted WinBioControlUnit API call can lead to memory corruption.\\n * _TALOS-2025-2188_ (CVE-2025-32089) is a buffer overflow vulnerability. A specially crafted ControlVault API call can lead to an arbitrary code execution.\\n * _TALOS-2025-2189_ (CVE-2025-36553) is a buffer overflow vulnerability. A specially crafted ControlVault API call can lead to memory corruption.\\n\\n\\n\\n## **Entr ‘ouvert Lasso vulnerabilities**\\n\\n _Discovered by Keane O ‘Kelley and another member of Cisco Advanced Security Initiative Group._\\n\\nLasso is a free (GNU General Public License) C library that defines processes for federated identities, single sign-on, and related protocols.\\n\\n_TALOS-2025-2193_ (CVE-2025-47151) is a type confusion vulnerability, where a specially crafted SAML response can lead to an arbitrary code execution.\\n\\n_TALOS-2025-2194_ (CVE-2025-46404), _TALOS-2025-2195_ (CVE-2025-46784), and _TALOS-2025-2196_ (CVE-2025-46705) are denial of service vulnerabilities. Specially crafted SAML responses can lead to a denial of service in all three cases.\\n\\n## **GL.iNet Slate AX vulnerability**\\n\\n _Discovered by Lilith \\u003e_\\u003e of Cisco Talos._\\n\\nSlate AX (GL-AXT1800) is a Wi-Fi 6GB travel router. Cisco Talos discovered a firmware downgrade vulnerability, _TALOS-2025-2230_ (CVE-2025-44018), in the OTA Update functionality. A specially crafted .tar file can lead to a firmware downgrade. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.”,”published”:”2025-11-26T18:36:06″,”modified”:”2025-11-26T18:36:06″,”type”:”talosblog”,”title”:”Dell ControlVault, Lasso, GL.iNet vulnerabilities”,”source”:””,”references”:””,”id”:”TALOSBLOG:D1595ECDB8B09FA4CD8705D0F5CC8130″,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[“CVE-2025-31361″,”CVE-2025-31649″,”CVE-2025-32089″,”CVE-2025-36460″,”CVE-2025-36463″,”CVE-2025-36553″,”CVE-2025-44018″,”CVE-2025-46404″,”CVE-2025-46705″,”CVE-2025-46784″,”CVE-2025-47151″],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:9.8,”severity”:”CRITICAL”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/blog.talosintelligence.com\/dell-controlvault-lasso-gl-inet-vulnerabilities\/”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-11-26T20:05:12″,”description”:”\\n\\nCisco Talos’ Vulnerability Discovery \\u0026 Research team recently disclosed five vulnerabilities in Dell ControlVault 3 firmware and its associated Windows software,…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[9,6,8,35,12,13,7,69,11,5],"class_list":["post-27762","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-critical","tag-cve","tag-cvss","tag-cvss-98","tag-exploit","tag-news","tag-security","tag-talosblog","tag-tapic","tag-vulnerability"],"yoast_head":"\n