30 Million devices. An RCE in a feature of their remote connect support capability for reflashing the operating system.https://t.co/92e20WSbT2
— Alyssa Miller ? Duchess of Hackington (@AlyssaM_InfoSec) June 24, 2021
Four separate security bugs would give attackers almost complete control and persistence over targeted devices, thanks to a faulty update mechanism.https://t.co/yh5g5qZ2Fn
— Peril Group (@PerilGroup) June 24, 2021
30M #Dell Devices at Risk for Remote BIOS Attacks RCE.
— Fabrizio Bustamante (@Fabriziobustama) June 24, 2021
By @threatpost #VPN #DNS #HTTP #Cybersecurity #IoT #infosec #BIOSAttack
Cc: @DrJDrooghaag @Victoryabro@AshokNellikar @techpearce2@fogle_shane @Shi4Tech @gvalan@archonsec @PVynckier @Corix_JChttps://t.co/M9nOrOiZX1 pic.twitter.com/lMnEwVKXEG
30M Dell devices at risk for Remote BIOS attacks, RCE ? https://t.co/Q3n1g2fsZR via @threatpost pic.twitter.com/myVIiyqLE0
— Eugene Kaspersky (@e_kaspersky) June 24, 2021
30M Dell Devices at Risk for Remote BIOS Attacks, RCE https://t.co/OV15vLMw03
— Nicolas Krassas (@Dinosn) June 24, 2021
Dell SupportAssist bugs put over 30 million PCs at risk https://t.co/ZyGjDQXKIJ
— The Cyber Security Hub™ (@TheCyberSecHub) June 24, 2021
https://t.co/81i4G5YnXx
— MrR3b00t | Defender of the cyber realm (@UK_Daniel_Card) June 24, 2021
thanks @mcbazza
Dell SupportAssistのBIOSConnect機能に4つの脆弱性。これによって、攻撃者は、BIOS経由で悪意のあるコードを実行できる。
— ぐーたっちまん o(`・ω・´)o (@dexderrewedd447) June 24, 2021
Dell SupportAssist bugs put over 30 million PCs at risk https://t.co/Ig4SOfEC4e
Dell 컴퓨터에 선탑재된 SupportAssist. 그중 펌웨어 업데이트를 담당하는 BIOS Connect의 통신에 중간자 공격이 가능해 보안 부팅 등의 수단을 모두 우회하고 악성코드를 바이오스에 심어 부팅시킬 수 있습니다. 패치되기 전까지 BIOS Connect를 사용하지 마십시오.https://t.co/PvoKCYc8Yq
— ?라루얀 / 말썽쟁이 구운 경단? (@LaruYan) June 25, 2021
@eclypsium #Security found 4 major security #vulnerabilities in #BIOSConnect feature of @Dell #DellSupportAssist, allowing #attackers to remotely execute code in #BIOS of impacted devices. #girlswhocode #100DaysOfCode @dynamicCISO https://t.co/68okCdRTDm
— Rahul Neel Mani (@rneelmani) June 25, 2021
Patch your Dell machines. ??impressive research by the folks at @eclypsium https://t.co/f4BlSuyY4Q
— Ryan Naraine (@ryanaraine) June 24, 2021