What is the CVSS score of CVE-2025-36600?

CVE-2025-36600 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Latitude 12 Rugged Extreme 7214 Firmware are affected by CVE-2025-36600?

CVE-2025-36600 is a high-severity remote code execution vulnerability (CVSS 8.2) in an externally developed component that could allow attackers to execute arbitrary code on affected systems without…. A patch is available.

How to fix or mitigate CVE-2025-36600?

Within 24 hours: Identify all systems running the affected external component and document current versions. Within 7 days: Apply vendor-released patch to all affected systems, prioritizing internet-facing and business-critical assets. Within 30 days: Verify patch deployment across the entire environment and validate remediation through vulnerability scanning.

Latitude 12 Rugged Extreme 7214 Firmware CVE-2025-36600

EUVD-2025-20496 HIGH

Improper Access Control Applied to Mirrored or Aliased Memory Regions (CWE-1257)

2025-07-08 security_alert@emc.com

RCE Dell Latitude 12 Rugged Extreme 7214 Firmware

8.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.2 HIGH

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:33 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

1.51.0

EUVD ID Assigned

Mar 16, 2026 - 04:21 euvd

EUVD-2025-20496

Analysis Generated

Mar 16, 2026 - 04:21 vuln.today

CVE Published

Jul 08, 2025 - 15:15 nvd

HIGH 8.2

DescriptionCVE.org

Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

AnalysisAI

A remote code execution vulnerability in an externally developed component (CVSS 8.2). High severity vulnerability requiring prompt remediation.

Technical ContextAI

Vulnerability type: remote code execution. CVSS 8.2 indicates high severity. Affects an externally developed component.

RemediationAI

Monitor vendor channels for patch availability.

More in Latitude 12 Rugged Extreme 7214 Firmware

View all

CVE-2024-52541 HIGH This Week

8.2 Feb 19

Dell Client Platform BIOS contains a Weak Authentication vulnerability. Rated high severity (CVSS 8.2), this vulnerabili

CVE-2024-38483 MEDIUM This Month

6.7 Aug 14

Dell BIOS contains an Improper Input Validation vulnerability in an externally developed component. Rated medium severit

CVE-2024-0158 MEDIUM This Month

6.7 Jul 02