5.7
Medium
CVE-2026-40639 Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability
Description
Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Edge Gateway 3000 1.26 | earliest → < 1.26.0 | 1.26.0 |
| Dell Edge Gateway 5000 1.36 | earliest → < 1.36.0 | 1.36.0 |
| DELL EMBEDDED PC 3000 1.32 | earliest → < 1.32.0 | 1.32.0 |
| DELL EMBEDDED PC 5000 1.33 | earliest → < 1.33.0 | 1.33.0 |
| Dell Precision 3630 Tower 2.40 | earliest → < 2.40.0 | 2.40.0 |
| Dell Precision 3930 Rack 2.43 | earliest → < 2.43.0 | 2.43.0 |
| Latitude 7220 Rugged Extreme 1.51 | earliest → < 1.51.0 | 1.51.0 |
| Latitude Rugged 5420 1.42 | earliest → < 1.42.0 | 1.42.0 |
| Latitude Rugged 5424 1.42 | earliest → < 1.42.0 | 1.42.0 |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Latitude Rugged 7220EX 1.51 | earliest → < 1.51.0 | 1.51.0 |
| Latitude Rugged 7424 1.42 | earliest → < 1.42.0 | 1.42.0 |
| Precision 3930 Rack 2.43 | earliest → < 2.43.0 | 2.43.0 |