CVE-2025-36579

Thursday, April 16, 2026

5.1

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Summary

Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access.

Affected Software

Vendor	Product	Version Range	Status
Dell	Dell Pro 14 Essential PV14250	`0 < 1.4.0`	affected
Dell	Dell Pro Micro / QCM1255	`0 < 1.9.1`	affected
Dell	Dell Pro Slim / QCS1255	`0 < 1.9.1`	affected
Dell	Dell Pro Tower / QCT1255	`0 < 1.9.1`	affected
Dell	Alienware 16 Area-51 AA16250	`0 < 1.9.0`	affected
Dell	Alienware 16X Aurora AC16251	`0 < 1.8.1`	affected
Dell	Alienware 18 Area-51 AA18250	`0 < 1.9.0`	affected
Dell	Alienware Area-51 AAT225	`0 < 1.11.0`	affected
Dell	Alienware Aurora ACT1250	`0 < 1.10.0`	affected
Dell	Alienware m15 R6	`0 < 1.42.0`	affected
Dell	Alienware m15 R7	`0 < 1.37.0`	affected
Dell	Alienware m16 R1	`0 < 1.32.0`	affected
Dell	Alienware m16 R2	`0 < 1.18.0`	affected
Dell	Alienware m18 R1	`0 < 1.32.0`	affected
Dell	Alienware M18 R2	`0 < 1.20.0`	affected
Dell	Alienware x14 R2	`0 < 1.30.1`	affected
Dell	Alienware x16 R1	`0 < 1.30.1`	affected
Dell	Alienware X16 R2	`0 < 1.18.1`	affected
Dell	ChengMing 3900	`0 < 1.37.0`	affected
Dell	ChengMing 3910/3911	`0 < 1.32.0`	affected
Dell	ChengMing 3990	`0 < 1.35.1`	affected
Dell	ChengMing 3991	`0 < 1.35.1`	affected
Dell	Dell 14 DC14250	`0 < 1.4.0`	affected
Dell	Dell 14 Premium DA14250	`0 < 1.5.1`	affected
Dell	Dell 15 DC15250	`0 < 1.6.0`	affected
Dell	Dell 16 DC16250	`0 < 1.7.0`	affected
Dell	Dell 16 DC16251	`0 < 1.7.0`	affected
Dell	Dell 16 Premium DA16250	`0 < 1.7.0`	affected
Dell	Dell G15 5510	`0 < 1.38.0`	affected
Dell	Dell G15 5511	`0 < 1.41.0`	affected
Dell	Dell G15 5520	`0 < 1.38.0`	affected
Dell	Dell G15 5530	`0 < 1.30.0`	affected
Dell	Dell G16 7620	`0 < 1.38.0`	affected
Dell	Dell G16 7630	`0 < 1.30.0`	affected
Dell	Dell G5 5000	`0 < 1.28.2`	affected
Dell	Dell Pro 13 Plus PB13250	`0 < 2.8.1`	affected
Dell	Dell Pro 13 Plus PB13255	`0 < 1.9.1`	affected
Dell	Dell Pro 13 Premium PA13250	`0 < 2.8.1`	affected
Dell	Dell Pro 14 PC14250	`0 < 1.10.2`	affected
Dell	Dell Pro 14 Plus PB14250	`0 < 2.8.1`	affected
Dell	Dell Pro 14 Plus PB14255	`0 < 1.9.1`	affected
Dell	Dell Pro 14 Premium PA14250	`0 < 2.8.1`	affected
Dell	Dell Pro 15 Essential PV15250	`0 < 1.2.0`	affected
Dell	Dell Pro 16 PC16250	`0 < 1.10.2`	affected
Dell	Dell Pro 16 Plus PB16250	`0 < 2.8.1`	affected
Dell	Dell Pro 16 Plus PB16255	`0 < 1.9.1`	affected
Dell	Dell Pro 24 All-in-One Plus/Dell Pro 24 All-in-One	`0 < 1.10.1`	affected
Dell	Dell Pro Laptop PC14250	`0 < 1.10.2`	affected
Dell	Dell Pro Laptop PC16250	`0 < 1.10.2`	affected
Dell	Dell Pro Max 14 MC14250	`0 < 1.9.0`	affected
Dell	Dell Pro Max 14 MC14255	`0 < 1.6.2`	affected
Dell	Dell Pro Max 16 MC16250	`0 < 1.9.0`	affected
Dell	Dell Pro Max 16 MC16255	`0 < 1.6.2`	affected
Dell	Dell Pro Max Micro FCM2250	`0 < 1.10.1`	affected
Dell	Dell Pro Max Slim FCS1250	`0 < 1.10.1`	affected
Dell	Dell Pro Max Tower T2 FCT2250	`0 < 1.10.1`	affected
Dell	Dell Pro Micro/Micro Plus QCM1250/QBM1250	`0 < 1.10.1`	affected
Dell	Dell Pro Rugged 13 RA13250	`0 < 1.12.1`	affected
Dell	Dell Pro Rugged 14 RB14250	`0 < 1.12.1`	affected
Dell	Dell Pro Slim Essential QVS1260	`0 < 1.10.1`	affected
Dell	Dell Pro Slim Plus QBS1250/Dell Pro Slim QCS1250	`0 < 1.10.1`	affected
Dell	Dell Pro Tower Essential QVT1260	`0 < 1.10.1`	affected
Dell	Dell Pro Tower Plus QBT1250/Dell Pro Tower QCT1250	`0 < 1.10.1`	affected
Dell	Dell Slim ECS1250	`0 < 1.10.1`	affected
Dell	Dell Tower ECT1250	`0 < 1.10.1`	affected
Dell	Dell Tower Plus EBT2250	`0 < 1.11.0`	affected
Dell	Inspiron 13 5320	`0 < 1.30.0`	affected
Dell	Inspiron 13 5330	`0 < 1.28.0`	affected
Dell	Inspiron 14 5420	`0 < 1.33.0`	affected
Dell	Inspiron 14 5430	`0 < 1.26.0`	affected
Dell	Inspiron 14 5440	`0 < 1.19.0`	affected
Dell	Inspiron 14 7420 2-in-1	`0 < 1.31.0`	affected
Dell	Inspiron 14 7430 2-in-1	`0 < 1.26.0`	affected
Dell	Inspiron 14 7440 2-in-1	`0 < 1.19.0`	affected
Dell	Inspiron 14 Plus 7420	`0 < 1.34.0`	affected
Dell	Inspiron 14 Plus 7430	`0 < 1.26.0`	affected
Dell	Inspiron 14 Plus 7440	`0 < 1.22.0`	affected
Dell	Inspiron 15 3511	`0 < 1.43.0`	affected
Dell	Inspiron 15 3520	`0 < 1.39.0`	affected
Dell	Inspiron 16 5620	`0 < 1.33.0`	affected
Dell	Inspiron 16 5630	`0 < 1.26.0`	affected
Dell	Inspiron 16 5640	`0 < 1.18.0`	affected
Dell	Inspiron 16 7610	`0 < 1.36.0`	affected
Dell	Inspiron 16 7620 2-in-1	`0 < 1.31.0`	affected
Dell	Inspiron 16 7630 2-in-1	`0 < 1.26.0`	affected
Dell	Inspiron 16 7640 2-in-1	`0 < 1.18.0`	affected
Dell	Inspiron 16 Plus 7620	`0 < 1.34.0`	affected
Dell	Inspiron 16 Plus 7630	`0 < 1.26.0`	affected
Dell	Inspiron 16 Plus 7640	`0 < 1.22.0`	affected
Dell	Inspiron 24 5420 All-in-One	`0 < 1.25.0`	affected
Dell	Inspiron 24 5430 All-in-One	`0 < 1.18.0`	affected
Dell	Inspiron 27 7720 All-in-One	`0 < 1.25.0`	affected
Dell	Inspiron 27 7730 All-in-One	`0 < 1.18.0`	affected
Dell	Inspiron 3020 Desktop	`0 < 1.32.0`	affected
Dell	Inspiron 3020 Small Desktop	`0 < 1.32.0`	affected
Dell	Inspiron 3030	`0 < 1.22.1`	affected
Dell	Inspiron 3030S	`0 < 1.22.1`	affected
Dell	Inspiron 3910	`0 < 1.37.0`	affected
Dell	Inspiron 5400/5401	`0 < 1.37.0`	affected
Dell	Inspiron 5401 AIO	`0 < 1.37.0`	affected
Dell	Inspiron 5410 All-in-One	`0 < 1.35.0`	affected
Dell	Inspiron 5510	`0 < 2.39.0`	affected
Dell	Inspiron 7700 All-In-One	`0 < 1.37.0`	affected
Dell	Inspiron 7710 All-in-One	`0 < 1.35.0`	affected
Dell	Latitude 3120	`0 < 1.35.1`	affected
Dell	Latitude 3140	`0 < 1.28.1`	affected
Dell	Latitude 3140 2in1	`0 < 1.28.1`	affected
Dell	Latitude 3320	`0 < 1.41.0`	affected
Dell	Latitude 3330	`0 < 1.33.0`	affected
Dell	Latitude 3340	`0 < 1.29.0`	affected
Dell	Latitude 3410	`0 < 1.36.0`	affected
Dell	Latitude 3420	`0 < 1.46.0`	affected
Dell	Latitude 3430	`0 < 1.32.0`	affected
Dell	Latitude 3440	`0 < 1.29.0`	affected
Dell	Latitude 3450	`0 < 1.20.0`	affected
Dell	Latitude 3510	`0 < 1.36.0`	affected
Dell	Latitude 3520	`0 < 1.46.0`	affected
Dell	Latitude 3530	`0 < 1.32.0`	affected
Dell	Latitude 3540	`0 < 1.29.0`	affected
Dell	Latitude 3550	`0 < 1.20.0`	affected

Weaknesses

CWE-640: CWE-640: Weak Password Recovery Mechanism for Forgotten Password

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: no
- Technical Impact: partial

References

https://www.dell.com/support/kbdoc/en-us/000300450/dsa-2025-153

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.