Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leadin

The primary impact of CVE-2025-36579 is unauthorized access to the system. Because exploitation requires physical access, the attack vector is limited. However, successful exploitation could allow an attacker to modify system settings, install malicious software, or exfiltrate sensitive data stored on the device. The blast radius is limited to the compromised system itself, but the potential for data theft or system compromise remains significant. This vulnerability highlights the importance of physical security controls alongside software-based security measures.

Organizations with Dell Client Platform BIOS systems deployed in environments with limited physical security controls are at increased risk. This includes organizations with server rooms accessible to unauthorized personnel, or systems deployed in public areas without adequate physical security measures. Legacy systems running older BIOS versions are particularly vulnerable.

• linux / server:

journalctl -u bios_update | grep -i 'password recovery'

• generic web: Check BIOS configuration pages for unusual password reset options or vulnerabilities. Review system logs for suspicious activity related to password resets.

1. 2026-04-16Disclosure

   disclosure

1. 已保留2025-04-15
2. 发布日期2026-04-16
3. EPSS 更新日期2026-04-24

The primary mitigation for CVE-2025-36579 is to upgrade the Dell BIOS to version 2.39.0 or later. Dell has released a BIOS update specifically addressing this vulnerability. If an immediate upgrade is not feasible due to compatibility concerns or system downtime requirements, consider implementing enhanced physical security measures, such as restricting physical access to the server room and utilizing physical security devices like locked cabinets and surveillance cameras. After upgrading the BIOS, verify the password recovery mechanism functions as expected and that unauthorized access is prevented.