Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HDell Alienware M15 R6
HWDellall versionsDell Alienware M15 R6 Firmware
OSDell< 1.34.0Dell Alienware M15 R7
HWDellall versionsDell Alienware M15 R7 Firmware
OSDell< 1.28.0Dell Alienware M16 R1
HWDellall versionsDell Alienware M16 R1 Firmware
OSDell< 1.21.0Dell Alienware M16 R2
HWDellall versionsDell Alienware M16 R2 Firmware
OSDell< 1.8.0Dell Alienware M18 R1
HWDellall versionsDell Alienware M18 R1 Firmware
OSDell< 1.21.0Dell Alienware M18 R2
HWDellall versionsDell Alienware M18 R2 Firmware
OSDell< 1.9.0Dell Alienware X14 R2
HWDellall versionsDell Alienware X14 R2 Firmware
OSDell< 1.17.0Dell Alienware X16 R1
HWDellall versionsDell Alienware X16 R1 Firmware
OSDell< 1.17.0Dell Alienware X16 R2
HWDellall versionsDell Alienware X16 R2 Firmware
OSDell< 1.7.0Dell Chengming 3900
HWDellall versionsDell Chengming 3900 Firmware
OSDell< 1.26.0Dell Latitude 5300 2 In 1
HWDellall versionsDell Latitude 5300 2 In 1 Firmware
OSDell< 1.33.1Dell Latitude 5310
HWDellall versionsDell Latitude 5310 2 In 1
HWDellall versionsDell Latitude 5310 2 In 1 Firmware
OSDell< 1.26.1Dell Latitude 5310 Firmware
OSDell< 1.26.1Dell Latitude 5320
HWDellall versionsDell Latitude 5320 Firmware
OSDell< 1.40.0Dell Latitude 5330
HWDellall versionsDell Latitude 5330 Firmware
OSDell< 1.25.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2025-43728CRITICAL9.6PL ✓same product
Obejście mechanizmu ochrony w Dell ThinOS 10 (Auth Bypass)
CVE-2025-43993HIGH7.8same product
Dell Wireless 5932e and Qualcomm Snapdragon X62 Firmware and GNSS/GPS Driver, versions prior to 3.2.0.22 conta...
CVE-2025-43729HIGH7.8same product
Dell ThinOS 10, versions prior to 2508_10.0127, contains an Incorrect Permission Assignment for Critical Resou...
CVE-2025-43730HIGH8.4same product
Dell ThinOS 10, versions prior to 2508_10.0127, contains an Improper Neutralization of Argument Delimiters in ...
CVE-2025-43882HIGH7.8same product
Dell ThinOS 10, versions prior to 2508_10.0127, contains an Unverified Ownership vulnerability. A local low-pr...