Dell Security Vulnerability

[sonic1485]

Just spotted this story:

 

https://www.theregister.com/2021/05/04/dell_driver_flaw/

 

I know the majority of our devices will be affected :-(

 

https://www.dell.com/support/kbdoc/pl-pl/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-control-vulnerability

[synaesthesia]

Surely only if the machines are not rebuilt/reimaged as this is a driver bundled with them?

[sonic1485]

For us we re-image but then as part of the rebuild use the Dell Command Utility to get the latest updates and then uninstall it before they laptops go out to staff. I've run the tool to remove the file on a couple of machines this morning and although they no longer have the DCU on them, they still have dbutil_2_3.sys