CVE-2025-36579 identifies a weakness in the password recovery mechanism of the BIOS on Dell Pro 14 Essential PV14250 systems. This vulnerability allows an attacker who has physical access to the device to bypass authentication controls via the weak recovery process, potentially leading to unauthorized system access. The vulnerability is categorized under CWE-640, which relates to weak password recovery mechanisms. The CVSS v3.1 score of 5.1 indicates a medium severity with attack vector requiring physical access, low attack complexity, no privileges or user interaction needed, and impacts confidentiality, integrity, and availability to a limited extent. No patch or official remediation has been published by Dell as of the provided data.

An attacker with physical access to the affected Dell system could exploit the weak password recovery mechanism to gain unauthorized access. This could lead to limited compromise of confidentiality, integrity, and availability of the system. Since the attack requires physical access, remote exploitation is not possible. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, physical security controls should be enforced to prevent unauthorized physical access to affected devices. Monitor Dell's advisories for updates on remediation.