Flaws in Dell’s over-the-air device recovery and update impacts millions of devices

The over-the-internet firmware update and OS recovery feature present in 128 Dell computer models suffers from certificate validation and other flaws. The vulnerabilities were discovered by researchers from Eclypsium, a company that specializes in hardware and firmware security, and will be fully disclosed during a presentation in August at the DEF CON security conference. Dell has started releasing BIOS/UEFI updates for the affected models and advises everyone to deploy those updates using alternative firmware update methods, not the impacted feature called BIOSConnect.”]

Source: https://www.csoonline.com/article/3622968/flaws-in-dells-over-the-air-device-recovery-and-update-impacts-millions-of-devices.html