CVE-2026-40639
MEDIUM 5.7Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges.
NO EXPLOITATION SIGNALS
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.1%chance of exploitation in 30 days · 2nd percentile
○ In CISA KEV
○ Public exploit / PoC
Impact if exploited
5.7CVSS 3.1 · MEDIUM
- ConfidentialityHigh
- IntegrityHigh
- AvailabilityNone
What an attacker needs
- ⚠Access: Requires physical access to the device
- ✓Privileges: No account or privileges required
- ✓User interaction: No user interaction needed
- ⚠Complexity: Needs a race window or specific setup
✓ lowers the bar for an attacker · ⚠ raises it
Affected
Vendors Dell
Products Dell Edge Gateway 3000 Dell Edge Gateway 5000 Dell Embedded Pc 3000 Dell Embedded Pc 5000 Dell Precision 3630 Tower Dell Precision 3930 Rack Latitude 7220 Rugged Extreme Latitude Rugged 5420
Weakness (CWE)
- CWE-261
CVSS vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N