{"id":"CVE-2025-36579","aliases":["EUVD-2025-209501","GHSA-2h3v-69mw-9j56"],"status":"published","title":"Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An...","description":"Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access.","severity":{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00176,"percentile":0.072,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-640"],"published":"2026-04-16T16:05:32Z","modified":"2026-06-17T09:14:49Z","products":[{"vendor":"dell","product":"alienware 16 area-51 aa16250"},{"vendor":"dell","product":"alienware 16x aurora ac16251"},{"vendor":"dell","product":"alienware 18 area-51 aa18250"},{"vendor":"dell","product":"alienware area-51 aat225"},{"vendor":"dell","product":"alienware aurora act1250"},{"vendor":"dell","product":"alienware m15 r6"},{"vendor":"dell","product":"alienware m15 r7"},{"vendor":"dell","product":"alienware m16 r1"},{"vendor":"dell","product":"alienware m16 r2"},{"vendor":"dell","product":"alienware m18 r1"},{"vendor":"dell","product":"alienware m18 r2"},{"vendor":"dell","product":"alienware x14 r2"},{"vendor":"dell","product":"alienware x16 r1"},{"vendor":"dell","product":"alienware x16 r2"},{"vendor":"dell","product":"chengming 3900"},{"vendor":"dell","product":"chengming 3910/3911"},{"vendor":"dell","product":"chengming 3990"},{"vendor":"dell","product":"chengming 3991"},{"vendor":"dell","product":"dell 14 dc14250"},{"vendor":"dell","product":"dell 14 premium da14250"},{"vendor":"dell","product":"dell 15 dc15250"},{"vendor":"dell","product":"dell 16 dc16250"},{"vendor":"dell","product":"dell 16 dc16251"},{"vendor":"dell","product":"dell 16 premium da16250"},{"vendor":"dell","product":"dell g15 5510"},{"vendor":"dell","product":"dell g15 5511"},{"vendor":"dell","product":"dell g15 5520"},{"vendor":"dell","product":"dell g15 5530"},{"vendor":"dell","product":"dell g16 7620"},{"vendor":"dell","product":"dell g16 7630"},{"vendor":"dell","product":"dell g5 5000"},{"vendor":"dell","product":"dell pro 13 plus pb13250"},{"vendor":"dell","product":"dell pro 13 plus pb13255"},{"vendor":"dell","product":"dell pro 13 premium pa13250"},{"vendor":"dell","product":"dell pro 14 essential pv14250"},{"vendor":"dell","product":"dell pro 14 pc14250"},{"vendor":"dell","product":"dell pro 14 plus pb14250"},{"vendor":"dell","product":"dell pro 14 plus pb14255"},{"vendor":"dell","product":"dell pro 14 premium pa14250"},{"vendor":"dell","product":"dell pro 15 essential pv15250"},{"vendor":"dell","product":"dell pro 16 pc16250"},{"vendor":"dell","product":"dell pro 16 plus pb16250"},{"vendor":"dell","product":"dell pro 16 plus pb16255"},{"vendor":"dell","product":"dell pro 24 all-in-one plus/dell pro 24 all-in-one"},{"vendor":"dell","product":"dell pro laptop pc14250"},{"vendor":"dell","product":"dell pro laptop pc16250"},{"vendor":"dell","product":"dell pro max 14 mc14250"},{"vendor":"dell","product":"dell pro max 14 mc14255"},{"vendor":"dell","product":"dell pro max 16 mc16250"},{"vendor":"dell","product":"dell pro max 16 mc16255"},{"vendor":"dell","product":"dell pro max micro fcm2250"},{"vendor":"dell","product":"dell pro max slim fcs1250"},{"vendor":"dell","product":"dell pro max tower t2 fct2250"},{"vendor":"dell","product":"dell pro micro / qcm1255"},{"vendor":"dell","product":"dell pro micro/micro plus qcm1250/qbm1250"},{"vendor":"dell","product":"dell pro rugged 13 ra13250"},{"vendor":"dell","product":"dell pro rugged 14 rb14250"},{"vendor":"dell","product":"dell pro slim / qcs1255"},{"vendor":"dell","product":"dell pro slim essential qvs1260"},{"vendor":"dell","product":"dell pro slim plus qbs1250/dell pro slim qcs1250"},{"vendor":"dell","product":"dell pro tower / qct1255"},{"vendor":"dell","product":"dell pro tower essential qvt1260"},{"vendor":"dell","product":"dell pro tower plus qbt1250/dell pro tower qct1250"},{"vendor":"dell","product":"dell slim ecs1250"},{"vendor":"dell","product":"dell tower ect1250"},{"vendor":"dell","product":"dell tower plus ebt2250"},{"vendor":"dell","product":"inspiron 13 5320"},{"vendor":"dell","product":"inspiron 13 5330"},{"vendor":"dell","product":"inspiron 14 5420"},{"vendor":"dell","product":"inspiron 14 5430"},{"vendor":"dell","product":"inspiron 14 5440"},{"vendor":"dell","product":"inspiron 14 7420 2-in-1"},{"vendor":"dell","product":"inspiron 14 7430 2-in-1"},{"vendor":"dell","product":"inspiron 14 7440 2-in-1"},{"vendor":"dell","product":"inspiron 14 plus 7420"},{"vendor":"dell","product":"inspiron 14 plus 7430"},{"vendor":"dell","product":"inspiron 14 plus 7440"},{"vendor":"dell","product":"inspiron 15 3511"},{"vendor":"dell","product":"inspiron 15 3520"},{"vendor":"dell","product":"inspiron 16 5620"},{"vendor":"dell","product":"inspiron 16 5630"},{"vendor":"dell","product":"inspiron 16 5640"},{"vendor":"dell","product":"inspiron 16 7610"},{"vendor":"dell","product":"inspiron 16 7620 2-in-1"},{"vendor":"dell","product":"inspiron 16 7630 2-in-1"},{"vendor":"dell","product":"inspiron 16 7640 2-in-1"},{"vendor":"dell","product":"inspiron 16 plus 7620"},{"vendor":"dell","product":"inspiron 16 plus 7630"},{"vendor":"dell","product":"inspiron 16 plus 7640"},{"vendor":"dell","product":"inspiron 24 5420 all-in-one"},{"vendor":"dell","product":"inspiron 24 5430 all-in-one"},{"vendor":"dell","product":"inspiron 27 7720 all-in-one"},{"vendor":"dell","product":"inspiron 27 7730 all-in-one"},{"vendor":"dell","product":"inspiron 3020 desktop"},{"vendor":"dell","product":"inspiron 3020 small desktop"},{"vendor":"dell","product":"inspiron 3030"},{"vendor":"dell","product":"inspiron 3030s"},{"vendor":"dell","product":"inspiron 3910"},{"vendor":"dell","product":"inspiron 5400/5401"},{"vendor":"dell","product":"inspiron 5401 aio"},{"vendor":"dell","product":"inspiron 5410 all-in-one"},{"vendor":"dell","product":"inspiron 5510"},{"vendor":"dell","product":"inspiron 7700 all-in-one"},{"vendor":"dell","product":"inspiron 7710 all-in-one"},{"vendor":"dell","product":"latitude 3120"},{"vendor":"dell","product":"latitude 3140"},{"vendor":"dell","product":"latitude 3140 2in1"},{"vendor":"dell","product":"latitude 3320"},{"vendor":"dell","product":"latitude 3330"},{"vendor":"dell","product":"latitude 3340"},{"vendor":"dell","product":"latitude 3410"},{"vendor":"dell","product":"latitude 3420"},{"vendor":"dell","product":"latitude 3430"},{"vendor":"dell","product":"latitude 3440"},{"vendor":"dell","product":"latitude 3450"},{"vendor":"dell","product":"latitude 3510"},{"vendor":"dell","product":"latitude 3520"},{"vendor":"dell","product":"latitude 3530"},{"vendor":"dell","product":"latitude 3540"},{"vendor":"dell","product":"latitude 3550"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000300450/dsa-2025-153","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-36579"},{"url":"https://github.com/advisories/GHSA-2h3v-69mw-9j56"}],"sources":{"cve":[{"id":"CVE-2025-36579","description":"Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access.","status":"published","published":"2026-04-16T16:05:32.561Z","modified":"2026-05-27T16:34:39.11Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-640"],"updated_at":"2026-11-02T14:32:45.503988Z"}],"euvd":[{"id":"EUVD-2025-209501","description":"Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access.","status":"published","published":"2026-04-16T16:05:32Z","modified":"2026-05-27T16:34:39Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T18:21:03.926243Z"}],"ghsa":[{"id":"GHSA-2h3v-69mw-9j56","title":"Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An...","description":"Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access.","status":"published","published":"2026-04-16T18:31:22Z","modified":"2026-04-16T18:31:27Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-640"],"updated_at":"2026-11-02T15:07:31.795355Z"}],"nvd":[{"id":"CVE-2025-36579","description":"Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access.","status":"published","published":"2026-04-16T17:16:54.073Z","modified":"2026-06-17T09:14:49.357Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-640"],"updated_at":"2026-11-02T14:12:02.090779Z"}]}}