CVE-2025-36600
CVE-2025-36600 is a high-severity vulnerability in Dell Latitude 12 Rugged Extreme 7214 Firmware with a CVSS 3.x base score of 8.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-1257.
Key facts
- Severity: High (CVSS 3.x base score 8.2)
- EPSS exploit prediction: 0% (7th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2025-20496
- Weakness: CWE-1257
- Affected product: Dell Latitude 12 Rugged Extreme 7214 Firmware
- Published:
- Last modified:
Description
Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Frequently asked questions
- What is CVE-2025-36600?
- Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
- How severe is CVE-2025-36600?
- CVE-2025-36600 has a CVSS 3.x base score of 8.2, rated high severity. It is exploitable over local access with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2025-36600 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (7th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2025-36600?
- CVE-2025-36600 affects Dell Latitude 12 Rugged Extreme 7214 Firmware. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2025-36600?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- Does CVE-2025-36600 have an EU (EUVD) identifier?
- Yes. CVE-2025-36600 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-20496.
- When was CVE-2025-36600 published?
- CVE-2025-36600 was published on 2025-07-08 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:o:dell:latitude_12_rugged_extreme_7214_firmware:*:*:*:*:*:*:*:*
More vulnerabilities in Dell Latitude 12 Rugged Extreme 7214 Firmware
- CVE-2024-52541 — High (CVSS 8.2): Dell Client Platform BIOS contains a Weak Authentication vulnerability. A high privileged attacker with local access…
- CVE-2024-22429 — High (CVSS 7.5): Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin…
- CVE-2021-36343 — High (CVSS 7.5): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially…
- CVE-2021-36342 — High (CVSS 7.5): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially…
- CVE-2024-38483 — Medium (CVSS 5.8): Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged…
- CVE-2024-0158 — Medium (CVSS 5.1): Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin…
All CVEs affecting Dell Latitude 12 Rugged Extreme 7214 Firmware →
Other CWE-1257 vulnerabilities
- CVE-2025-27032 — High (CVSS 7.8): memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache…
- CVE-2019-1174 — High (CVSS 7.0): An elevation of privilege vulnerability exists in the way that the PsmServiceExtHost.dll handles objects in memory. An…