The Dell BIOS contains a weakness in how passwords are encoded. An unauthenticated attacker who gains physical access to a device could exploit this flaw and elevate themselves to privileged process execution, potentially taking full control of the machine. The vulnerability is characterized as insecure password storage or processing and can compromise BIOS integrity.

Affected devices include Dell Embedded PC 3000 and 5000 lines, Dell Edge Gateway 3000 and 5000, Dell Precision 3630 Tower, Dell Precision 3930 Rack, Dell Latitude 7220 Rugged Extreme, Dell Latitude Rugged 5420, Dell Latitude Rugged 5424, Dell Latitude Rugged 7220EX, Dell Latitude Rugged 7424, and Dell Precision 3930 Rack models.

The CVSS score of 5.7 reflects a moderate risk, but the EPSS score is not available, leaving the exact likelihood of exploitation uncertain. Because the attack requires physical access and is not currently listed in the CISA KEV catalog, the threat is considered limited to environments where an attacker can physically reach the device. If physical security is compromised, the attacker could achieve full system compromise after escalating privileges.