A vulnerability of privileged promo...

22
09

A vulnerability of privileged promotion to hundreds of millions of Dell PCs.Patch installation required

数億台のデル製PCに特権昇格の脆弱性。パッチインストール必須

 Sentinelone, a security company, has a vulnerability that attackers can be promoted from non -administrator users to kernel mode privileges, such as Dell's desktop PC, laptop PC, and tablet's firmware update utility.Was announced.

 Sentinelone has pointed out that this vulnerabilities have existed since 2009, assuming hundreds of millions of devices around the world.Dell is a driver "dbutil_2_3" contained in utility for this bug..It is said that it can be avoided by deleting Sys "and is recommended to update using Dell Security Advisory Update.It will also be able to run from the notification app released after May 10.

 For detailed information such as target models and drivers, please refer to Dell's official support page (English).