Product:
Client Platform BIOS
Summary
Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.1 | CVE-2025-36579 |
Exploitation
To exploit this vulnerability, an attacker must have physical access to the affected system. By utilizing the weak password recovery mechanism, the attacker can gain unauthorized access to the system without needing any prior authentication.
Affected Products
- Dell Client Platform BIOS: Vulnerable due to weak password recovery mechanism allowing unauthorized access with physical access.
Mitigation
To mitigate this vulnerability, it is recommended to restrict physical access to the systems and implement stronger password recovery mechanisms to prevent unauthorized access.