Security Flaws Found in Dell’s Pre-installed Support Software GA S REGULAR Menu Lifewire Tech for Humans Newsletter! Search Close GO News > Computers

Security Flaws Found in Dell’s Pre-installed Support Software

Over 30 million devices affected

By Joshua Hawkins Joshua Hawkins Freelance Technology Reporter Full Sail University Josh Hawkins is a freelance writer for Lifewire who loves writing about the latest tech and gadgets that help make people’s lives easier. As an avid gamer and VR enthusiast, he also enjoys diving deep into the technology that helps bring those kinds of experiences to life. lifewire's editorial guidelines Updated on June 25, 2021 04:43PM EDT Fact checked by Rich Scherr Fact checked by Rich Scherr University of Maryland Baltimore County Rich Scherr is a seasoned technology and financial journalist who spent nearly two decades as the editor of Potomac and Bay Area Tech Wire. lifewire's fact checking process Tweet Share Email Tweet Share Email Computers Mobile Phones Internet & Security Computers & Tablets Smart Life Home Theater & Entertainment Software & Apps Social Media Streaming Gaming Millions of Dell devices could be at risk due to security flaws found within the support software that the company pre-installs on many of its systems. Eclypsium has discovered multiple security flaws in 129 different computer models that utilize Dell’s SupportAssist software, a report has revealed. According to Gizmodo, there are four separate vulnerabilities, one of which can allow attackers to redirect the connection between Dell’s BIOSConnect software and the Dell servers. If successful, the redirect would allow bad actors to force modified update packages onto the affected models. XPS / Unsplash Researchers say the vulnerabilities essentially would allow attackers to gain access to affected machines through an exploit found within the boot configuration, as well as by impersonating Dell and delivering malicious content back to the machine. Perhaps one of the most concerning parts of this entire ordeal, however, is that Eclypsium discovered these flaws while using a secured-core PC, which means the Windows Secure Boot feature won’t protect any affected machines. Eclypsium first notified Dell of the issues back in March. Since then, the computer manufacturer has worked to create an updated version of the system that does not suffer from the same security flaws. Eclypsium Two of the vulnerabilities have been fixed on the server-side, while others are addressed in software updates. However, Dell says users will need to update their BIOS/UEFI on each device to completely remove the flaws from their systems. If you own a Dell computer and you’re concerned that your device may be included in the list of 129 affected models, you can check out the Dell Advisory to see if your model is on the list, as well as what BIOS version you should be running to remove any of the vulnerabilities. Was this page helpful? Thanks for letting us know! Get the Latest Tech News Delivered Every Day Subscribe Tell us why! Other Not enough details Hard to understand Submit More from Lifewire How to Wipe a Dell Laptop How to Fix a Dell Laptop With No Sound Latest Windows 10 Drivers (October 21, 2022) How to Factory Reset a Dell Laptop How to Update Your Logitech Unifying Receiver How to Fix a Dell Keyboard Not Working How to Fix a Dell Laptop That Won't Turn On Dell XPS 13 7390 2-in-1 Review: A Gorgeous, Flexible Ultrabook How to Find Your Dell Laptop Model Number How to Disable the Function Key on a Dell Laptop How to Update BIOS How to Fix a Dell Laptop Black Screen How to Get a Dell Student Discount How to Track a Dell Laptop How to Turn On Wi-Fi on a Dell Laptop Dell 32-Inch Screen U3219Q Monitor Review Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up Newsletter Sign Up By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. Cookies Settings Accept All Cookies