CVE-2025-36579
Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An...
Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access.
- Record
CVE-2025-36579- CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Weakness
- CWE-640
- Updated
- 2026-11-02
EUVDEUVD-2025-209501
Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access.
- Record
EUVD-2025-209501- CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-2h3v-69mw-9j56
Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An...
Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access.
- Record
GHSA-2h3v-69mw-9j56- CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Weakness
- CWE-640
- Updated
- 2026-11-02
NVD
Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access.
- Record
CVE-2025-36579- CVSS 3.1
- 5.1 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L - Weakness
- CWE-640
- Updated
- 2026-11-02
Affected products
- dell alienware 16 area-51 aa16250
- dell alienware 16x aurora ac16251
- dell alienware 18 area-51 aa18250
- dell alienware area-51 aat225
- dell alienware aurora act1250
- dell alienware m15 r6
- dell alienware m15 r7
- dell alienware m16 r1
- dell alienware m16 r2
- dell alienware m18 r1
- dell alienware m18 r2
- dell alienware x14 r2
Show 108 moreShow less
- dell alienware x16 r1
- dell alienware x16 r2
- dell chengming 3900
- dell chengming 3910/3911
- dell chengming 3990
- dell chengming 3991
- dell 14 dc14250
- dell 14 premium da14250
- dell 15 dc15250
- dell 16 dc16250
- dell 16 dc16251
- dell 16 premium da16250
- dell g15 5510
- dell g15 5511
- dell g15 5520
- dell g15 5530
- dell g16 7620
- dell g16 7630
- dell g5 5000
- dell pro 13 plus pb13250
- dell pro 13 plus pb13255
- dell pro 13 premium pa13250
- dell pro 14 essential pv14250
- dell pro 14 pc14250
- dell pro 14 plus pb14250
- dell pro 14 plus pb14255
- dell pro 14 premium pa14250
- dell pro 15 essential pv15250
- dell pro 16 pc16250
- dell pro 16 plus pb16250
- dell pro 16 plus pb16255
- dell pro 24 all-in-one plus/dell pro 24 all-in-one
- dell pro laptop pc14250
- dell pro laptop pc16250
- dell pro max 14 mc14250
- dell pro max 14 mc14255
- dell pro max 16 mc16250
- dell pro max 16 mc16255
- dell pro max micro fcm2250
- dell pro max slim fcs1250
- dell pro max tower t2 fct2250
- dell pro micro / qcm1255
- dell pro micro/micro plus qcm1250/qbm1250
- dell pro rugged 13 ra13250
- dell pro rugged 14 rb14250
- dell pro slim / qcs1255
- dell pro slim essential qvs1260
- dell pro slim plus qbs1250/dell pro slim qcs1250
- dell pro tower / qct1255
- dell pro tower essential qvt1260
- dell pro tower plus qbt1250/dell pro tower qct1250
- dell slim ecs1250
- dell tower ect1250
- dell tower plus ebt2250
- dell inspiron 13 5320
- dell inspiron 13 5330
- dell inspiron 14 5420
- dell inspiron 14 5430
- dell inspiron 14 5440
- dell inspiron 14 7420 2-in-1
- dell inspiron 14 7430 2-in-1
- dell inspiron 14 7440 2-in-1
- dell inspiron 14 plus 7420
- dell inspiron 14 plus 7430
- dell inspiron 14 plus 7440
- dell inspiron 15 3511
- dell inspiron 15 3520
- dell inspiron 16 5620
- dell inspiron 16 5630
- dell inspiron 16 5640
- dell inspiron 16 7610
- dell inspiron 16 7620 2-in-1
- dell inspiron 16 7630 2-in-1
- dell inspiron 16 7640 2-in-1
- dell inspiron 16 plus 7620
- dell inspiron 16 plus 7630
- dell inspiron 16 plus 7640
- dell inspiron 24 5420 all-in-one
- dell inspiron 24 5430 all-in-one
- dell inspiron 27 7720 all-in-one
- dell inspiron 27 7730 all-in-one
- dell inspiron 3020 desktop
- dell inspiron 3020 small desktop
- dell inspiron 3030
- dell inspiron 3030s
- dell inspiron 3910
- dell inspiron 5400/5401
- dell inspiron 5401 aio
- dell inspiron 5410 all-in-one
- dell inspiron 5510
- dell inspiron 7700 all-in-one
- dell inspiron 7710 all-in-one
- dell latitude 3120
- dell latitude 3140
- dell latitude 3140 2in1
- dell latitude 3320
- dell latitude 3330
- dell latitude 3340
- dell latitude 3410
- dell latitude 3420
- dell latitude 3430
- dell latitude 3440
- dell latitude 3450
- dell latitude 3510
- dell latitude 3520
- dell latitude 3530
- dell latitude 3540
- dell latitude 3550
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-36579 is a medium vulnerability (CVSS 5.1) in Dell Alienware 16 Area-51 Aa16250, published April 16, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. No source names a fixed version.