Medium severity6.0NVD Advisory· Published Aug 1, 2015· Updated Jun 17, 2026

CVE-2015-2890

Description

The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions (CS) devices with model-dependent firmware before A21 does not enforce a BIOS_CNTL locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging console access, a similar issue to CVE-2015-3692.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/BIOS2 versions
cpe:2.3:o:dell:bios:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:dell:bios:*:*:*:*:*:*:*:*range: <=a20
- cpe:2.3:o:dell:bios:a13:*:*:*:*:*:*:*
Dell/Latitude E6500llm-create
Range: < A21
Dell/OptiPlexllm-fuzzy
Range: < A21
Dell/Precision Mobile Workstationllm-fuzzy
Range: < A21

Patches

Vulnerability mechanics

References

www.kb.cert.org/vuls/id/577140nvdThird Party AdvisoryUS Government Resource
www.kb.cert.org/vuls/id/BLUU-9XXQ9LnvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.390
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000