PT-2026-33341 · Dell · Client Platform Bios

Published 2026-04-16 · Updated 2026-04-17 · CVE-2025-36579

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Dell Client Platform BIOS (affected versions not specified)

Description Dell Client Platform BIOS contains a weak password recovery mechanism. This allows an unauthenticated attacker with physical access to the system to potentially gain unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2025-36579

Affected Products

Client Platform Bios

References · 4

• https://dell.com/support/kbdoc/en-us/000300450/dsa-2025-153 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36579 · Security Note
• https://twitter.com/infoflowcloud/status/2045105040461807737 · Twitter Post
• https://twitter.com/CVEnew/status/2045102671942533468 · Twitter Post