CVE-2015-2890

MEDIUM

CVSS Score

Published: August 1, 2015 at 01:00 AM UTC

Updated: June 17, 2026 at 12:24 AM UTC

24 products affected across 1 vendorBIOSLatitude E5420Latitude E6320

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6

Exploit prediction

EPSS 1%

Description

The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions (CS) devices with model-dependent firmware before A21 does not enforce a BIOS_CNTL locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging console access, a similar issue to CVE-2015-3692.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

BIOS · Dell

95%

v ≤ a10v ≤ a11v ≤ a12v ≤ a14v ≤ a15v ≤ a17v ≤ a18v ≤ a20a13

dell-latitude-e4310 (environment) · dell-latitude-e5410 (environment) · dell-latitude-e5420 (environment) · dell-latitude-e5510 (environment) · dell-latitude-e5520 (environment) · dell-latitude-e6220 (environment) · dell-latitude-e6320 (environment) · dell-latitude-e6410-atg (environment) · dell-latitude-e6420-atg (environment) · dell-latitude-e6420-xfr (environment) · dell-latitude-e6510 (environment) · dell-latitude-e6520 (environment) · dell-latitude-xt3 (environment) · dell-optiplex-390 (environment) · dell-optiplex-790 (environment) · dell-optiplex-990 (environment) · dell-precision-mobile-m4500 (environment) · dell-precision-mobile-m4600 (environment) · dell-precision-mobile-m6600 (environment) · dell-precision-t1600 (environment) · dell-precision-t3600 (environment) · dell-precision-t5600 (environment) · dell-precision-t5600-xl (environment)

Latitude E4310 · Delldevice

80%

All versions

Latitude E5410 · Delldevice

80%

All versions

Latitude E5420 · Delldevice

80%

All versions

Latitude E5510 · Delldevice

80%

All versions