{"id":"CVE-2026-40639","state":"PUBLISHED","title":"Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leadin","description":"Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges.","publishedAt":"2026-06-09T18:04:53.344Z","updatedAt":"2026-06-09T19:12:13.457Z","severity":{"score":5.7,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","source":"dell"},"assigner":"dell","products":["Dell Dell Edge Gateway 3000","Dell Dell Edge Gateway 5000","Dell DELL EMBEDDED PC 3000","Dell DELL EMBEDDED PC 5000","Dell Dell Precision 3630 Tower","Dell Dell Precision 3930 Rack","Dell Latitude 7220 Rugged Extreme","Dell Latitude Rugged 5420","Dell Latitude Rugged 5424","Dell Latitude Rugged 7220EX","Dell Latitude Rugged 7424","Dell Precision 3930 Rack"],"affected":[{"vendor":"Dell","product":"Dell Edge Gateway 3000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.26.0","versionType":"semver"}]},{"vendor":"Dell","product":"Dell Edge Gateway 5000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.36.0","versionType":"semver"}]},{"vendor":"Dell","product":"DELL EMBEDDED PC 3000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.32.0","versionType":"semver"}]},{"vendor":"Dell","product":"DELL EMBEDDED PC 5000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.33.0","versionType":"semver"}]},{"vendor":"Dell","product":"Dell Precision 3630 Tower","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.40.0","versionType":"semver"}]},{"vendor":"Dell","product":"Dell Precision 3930 Rack","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.43.0","versionType":"semver"}]},{"vendor":"Dell","product":"Latitude 7220 Rugged Extreme","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.51.0","versionType":"semver"}]},{"vendor":"Dell","product":"Latitude Rugged 5420","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.42.0","versionType":"semver"}]},{"vendor":"Dell","product":"Latitude Rugged 5424","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.42.0","versionType":"semver"}]},{"vendor":"Dell","product":"Latitude Rugged 7220EX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.51.0","versionType":"semver"}]},{"vendor":"Dell","product":"Latitude Rugged 7424","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.42.0","versionType":"semver"}]},{"vendor":"Dell","product":"Precision 3930 Rack","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.43.0","versionType":"semver"}]}],"references":["https://www.dell.com/support/kbdoc/en-us/000453482/dsa-2026-197"],"weaknesses":["CWE-261"],"ingestedAt":"2026-10-29T20:11:57.932Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/40xxx/CVE-2026-40639.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-40639","state":"PUBLISHED","datePublished":"2026-06-09T18:04:53.344Z","dateUpdated":"2026-06-09T19:12:13.457Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2026-04-14T16:10:47.675Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevation of Privileges."}],"affected":[{"vendor":"Dell","product":"Dell Edge Gateway 3000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.26.0","versionType":"semver"}]},{"vendor":"Dell","product":"Dell Edge Gateway 5000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.36.0","versionType":"semver"}]},{"vendor":"Dell","product":"DELL EMBEDDED PC 3000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.32.0","versionType":"semver"}]},{"vendor":"Dell","product":"DELL EMBEDDED PC 5000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.33.0","versionType":"semver"}]},{"vendor":"Dell","product":"Dell Precision 3630 Tower","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.40.0","versionType":"semver"}]},{"vendor":"Dell","product":"Dell Precision 3930 Rack","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.43.0","versionType":"semver"}]},{"vendor":"Dell","product":"Latitude 7220 Rugged Extreme","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.51.0","versionType":"semver"}]},{"vendor":"Dell","product":"Latitude Rugged 5420","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.42.0","versionType":"semver"}]},{"vendor":"Dell","product":"Latitude Rugged 5424","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.42.0","versionType":"semver"}]},{"vendor":"Dell","product":"Latitude Rugged 7220EX","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.51.0","versionType":"semver"}]},{"vendor":"Dell","product":"Latitude Rugged 7424","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.42.0","versionType":"semver"}]},{"vendor":"Dell","product":"Precision 3930 Rack","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.43.0","versionType":"semver"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000453482/dsa-2026-197","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"PHYSICAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":5.7,"vectorString":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-261","lang":"en","description":"CWE-261: Weak Encoding for Password","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2026-06-09T18:04:53.344Z"},"datePublic":"2026-06-09T17:58:00.000Z","credits":[{"lang":"en","value":"Dell would like to thank Darren McDonald from AmberWolf and Craig S. Blackie from MDSec for reporting this issue.","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.2"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-09T18:58:36.468011Z","id":"CVE-2026-40639","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-09T19:12:13.457Z"}}]}}}