CVE-2025-29985

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-29985
Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent (CAVA). An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000303931/dsa-2025-158-security-update-for-dell-common-event-enabler-vulnerabilities Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:common_event_enabler:9.0.0.0:*:*:*:*:*:*:*
History

15 Jul 2025, 16:08

Type Values Removed Values Added
CPE cpe:2.3:a:dell:common_event_enabler:9.0.0.0:*:*:*:*:*:*:*
Summary
  • (es) Dell Common Event Enabler, versión CEE 9.0.0.0, presenta una vulnerabilidad de inicialización de un recurso con un valor predeterminado inseguro en el Agente Antivirus Común (CAVA). Un atacante no autenticado con acceso remoto podría explotar esta vulnerabilidad, lo que provocaría un acceso no autorizado.
References () https://www.dell.com/support/kbdoc/en-us/000303931/dsa-2025-158-security-update-for-dell-common-event-enabler-vulnerabilities - () https://www.dell.com/support/kbdoc/en-us/000303931/dsa-2025-158-security-update-for-dell-common-event-enabler-vulnerabilities - Vendor Advisory
First Time Dell common Event Enabler
Dell

08 Apr 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-08 11:15

Updated : 2025-07-15 16:08

NVD link : CVE-2025-29985

Mitre link : CVE-2025-29985

CVE.ORG link : CVE-2025-29985

JSON object : View

Products Affected

dell

  • common_event_enabler
CWE
CWE-1188

Insecure Default Initialization of Resource