Description
Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Dell Edge Gateway 3000 | < 1.26.0 | 1.26.0 |
| Dell | Dell Edge Gateway 5000 | < 1.36.0 | 1.36.0 |
| Dell | DELL EMBEDDED PC 3000 | < 1.32.0 | 1.32.0 |
| Dell | DELL EMBEDDED PC 5000 | < 1.33.0 | 1.33.0 |
| Dell | Dell Precision 3630 Tower | < 2.40.0 | 2.40.0 |
| Dell | Dell Precision 3930 Rack | < 2.43.0 | 2.43.0 |
| Dell | Latitude 7220 Rugged Extreme | < 1.51.0 | 1.51.0 |
| Dell | Latitude Rugged 5420 | < 1.42.0 | 1.42.0 |
| Dell | Latitude Rugged 5424 | < 1.42.0 | 1.42.0 |
| Dell | Latitude Rugged 7220EX | < 1.51.0 | 1.51.0 |
| Dell | Latitude Rugged 7424 | < 1.42.0 | 1.42.0 |
| Dell | Precision 3930 Rack | < 2.43.0 | 2.43.0 |
Advisories 1
- WID-SEC-2026-1853 Dell Client Platform BIOS: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Jun 9, 2026
References
- https://www.dell.com/support/kbdoc/en-us/000453482/dsa-2026-197 vendor-advisory