CVE-2021-21551- Hundreds Of Millions Of Dell Computers At Risk

[pondus]

CVE-2021-21551- Hundreds Of Millions Of Dell Computers At Risk Due to Multiple BIOS Driver Privilege Escalation Flaws

https://labs.sentinelone.com/cve-2021-21551-hundreds-of-millions-of-dell-computers-at-risk-due-to-multiple-bios-driver-privilege-escalation-flaws/

https://gizmodo.com/you-should-definitely-update-your-dell-computer-right-n-1846823763?scrolla=5eb6d68b7fedc32c19ef33b4

 

 

Edited May 6, 2021 by pondus

[David H. Lipman]

RE:  DSA-2021-088: Dell Client Platform Security Update

[ChristophM]

Can someone clarify, if this issue is adressed by Malwarebytes? Do we really need to use separate software to detect and remove this?

Thanks

[David H. Lipman]

It is addressed by Malwarebytes only to a limited extent.  It is not a case of malware to be "detected" and "removed".  It is a case of an exploitable bug on Dell pre-installed software.  The Malwarebytes' Anti Exploitation module will help mitigate any attempt at exploiting the now known software's vulnerability.

Malwarebytes' software does not address bugs in software that create a vulnerability.  The full, paid-for, version of Malwarebytes software will only mitigate attempts at its exploitation.  It is up to the Dell PC owner to remove the vulnerable software or patch it.

Edited May 7, 2021 by David H. Lipman
Edited for content, clarity, spelling and grammar