Dell Chip Flaw Exposed Millions of Users

No indication that the vulnerabilities were exploited in the wild.

A flaw in Dell laptops could have exposed millions of users to attacks.

According to Reuters, the flaw could have given attackers the ability to steal sensitive data as well as maintain access even after a fresh operating system install, according to researchers with Cisco Talos.

Validated by Dell in a June security advisory, the flaw affected more than 100 models of Dell laptops, according to the company, and targeted a chip in the computer that stores passwords, biometric data and security codes, and installs fingerprint, smartcard and near-field communications drivers and firmware.

However there is no indication that the vulnerabilities have been exploited in the wild, according to the researchers, and Dell issued patches for the devices in March, April and May, with an overall security advisory published June 13th.

The vulnerabilities are specific to the Broadcom BCM5820X chip used by Dell in its ControlVault security firmware and software. The flaw affects laptop models common in the cybersecurity industry and government settings.

Vulnerabilities and Flaws Published: 5 August