CVE-2025-29989 | THREATINT

Description

Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to BIOS upgrade denial.

Reserved 2025-03-13 | Published 2025-04-10 | Updated 2025-04-10 | Assigner dell

LOW: 3.1CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L

Problem types

CWE-1328: Security Version Number Mutable to Older Versions

Product status

Default status

unaffected

Any version before 2.42.0

affected

Any version before 2.46.0

affected

Any version before 1.18.0

affected

References

www.dell.com/support/kbdoc/en-us/000250131/dsa-2025-016 vendor-advisory

cve.org (CVE-2025-29989)

nvd.nist.gov (CVE-2025-29989)

Download JSON