← Back

CVE-2025-36600

nvd nist
Published: Jul 8, 2025Modified: Jun 17, 2026

JSON object

Loading...
8.2
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Exploitability: 1.5 / Impact: 6.0
Source: security_alert@emc.com (Secondary)

Description

Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Affected (1)

Dell
1 product
Latitude 12 Rugged Extreme 7214 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Latitude 12 Rugged Extreme 7214 Firmware
Before 1.51.0
Running on/withPlatform Versions
Dell
Latitude 12 Rugged Extreme 7214
All versions

Related CWEs

CWE-1257
Improper Access Control Applied to Mirrored or Aliased Memory Regions
Aliased or mirrored memory regions in hardware designs may have inconsistent read/write permissions enforced by the hardware. A possible result is that an untrusted agent is blocked from accessing a memory region but is not blocked from accessing the corresponding aliased memory region.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.