CVE-2025-29989

Severity: medium (CVSS 4.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-04-10 · updated 2026-06-17
Weakness: CWE-1328

Description

Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to BIOS upgrade denial.

Affected products

Dell Precision 5820 Tower Firmware: before 2.42.0 — fixed in 2.42.0
Dell Precision 7820 Tower Firmware: before 2.46.0 — fixed in 2.46.0
Dell Precision 7865 Tower Firmware: before 1.18.0 — fixed in 1.18.0
Dell Precision 7920 Tower Firmware: before 2.46.0 — fixed in 2.46.0

How to fix

Upgrade to a fixed version: Dell Precision 5820 Tower Firmware 2.42.0; Dell Precision 7820 Tower Firmware 2.46.0; Dell Precision 7865 Tower Firmware 1.18.0; Dell Precision 7920 Tower Firmware 2.46.0. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/kbdoc/en-us/000250131/dsa-2025-016

Get alerted when CVE-2025-29989 or the next vulnerability affects your stack