CVE-2025-29989: Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability

Description

Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to BIOS upgrade denial.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack vector

Local

Complexity

Low

Privileges

High

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.1% · higher than 3% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

P5

Precision 5820 Tower Firmware · Dell

before 2.42.0 · source: NVD

P7

Precision 7820 Tower Firmware · Dell

before 2.46.0 · source: NVD

P7

Precision 7865 Tower Firmware · Dell

before 1.18.0 · source: NVD

P7

Precision 7920 Tower Firmware · Dell

before 2.46.0 · source: NVD