CVE-2025-29989

Low

Description

Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to BIOS upgrade denial.

SeverityLow

CVSS3.1

Exploit probability—

ProductDell Precision 5820 Tower Firmware

PublishedApr 10, 2025

First seenApr 10, 2025

Weakness typeCWE-1328CWE-1328

How to fix

Update

dell precision_5820_tower_firmware2.42.0 or later
dell precision_7820_tower_firmware2.46.0 or later
dell precision_7920_tower_firmware2.46.0 or later
dell precision_7865_tower_firmware1.18.0 or later

Vendor advisories

dell.com/support/kbdoc/en-us/000250131/dsa-2025-016

Affected products

Product	Affected versions	Fixed in
dell precision_5820_tower_firmware	v < 2.42.0	2.42.0
dell precision_7820_tower_firmware	v < 2.46.0	2.46.0
dell precision_7920_tower_firmware	v < 2.46.0	2.46.0
dell precision_7865_tower_firmware	v < 1.18.0	1.18.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.