Dell customers need to update their systems quickly. A vulnerability in the firmware update driver would affect hundreds of millions of devices.
Do you have a desktop, laptop, notebook or tablet Dell at home or in the office. Then you should update your device as soon as possible. The cybersecurity company Sentinel Labs gives that advice to all customers of the computer company. Sentinel Labs discovered a vulnerability in the firmware update driver DBUtil in December 2020 that has left Dell devices vulnerable to attack since 2009. According to the research firm, ‘hundreds of millions’ of computers worldwide have this vulnerable driver on board.
In this blog you can read some more technical explanation about the vulnerability in the driver and how attackers could exploit it. This cannot be done through an Internet connection, but once someone can access the system locally, they can exploit the driver to program malicious pieces of code on unpatched devices. Sentinel Labs labels the bug named CVE-2021-21551 as “extremely dangerous” due to the high number of affected devices and the fact that the bug went unnoticed for more than 10 years. So the best motto for Dell customers is to get the most recent firmware update to be carried out.
Has Dell been informed for some time?
Sentinel Labs warned Dell Technologies of the vulnerability in December and the companies have since worked together on a patch that adequately covers the issue. But The Record writes that the computer manufacturer could have performed that patch much faster. Another cybersecurity company CrowdStrike is said to have warned Dell in 2019. It took a while, but Dell Technologies finally listened.
Read more: Update your iOS and macOS devices to fix security holes