Are you using laptops or PCs from this company? Beware! You may be at big risk of attack from hackers

With Covid-19 pandemic having restricted most people to working from home and being totally dependent on their digital gadgets to do anything and everything, it becomes imperative to ensure a hacker attack does not disable them in any way. Yet this very possibility is looming large over users of this company's laptops and PCs. The Express UK, in its report quoting firmware security platform Eclypsium, says that Dell PCs are under threat of imminent hacker attack. It has reported that there is a security vulnerability that affects as many as 30 million such devices. It also mentioned that it is not restricted to a few models. In fact, as many as 129 different models are under threat of 'remote code execution attacks'. The vulnerability is ranked as high. It said, "This chain of vulnerabilities has a cumulative CVSS score of 8.3 (High) because it allows a privileged network adversary to impersonate Dell.com and gain arbitrary code execution at the BIOS/UEFI level of the affected device."

It pointed out that there are some vulnerabilities in these gadgets that could let hackers carry out remote code execution attacks. Eclypsium said, "Such an attack would enable adversaries to control the device’s boot process and subvert the operating system and higher-layer security controls."

The report has been taken very seriously as is clear from what the security platform said, "The Eclypsium team has coordinated with Dell PSIRT throughout the disclosure process. Dell has issued a Dell Security Advisory and is scheduling BIOS/UEFI updates for affected systems and updates to affected executables from Dell.com."

On what kind of an impact this will have on the devices, the company said, "Such code may alter the initial state of an operating system, violating common assumptions on the hardware/firmware layers and breaking OS-level security controls."

In a postscript, Eclypsium provided the reaction from DELL. It said, "Updates for all platforms are available as of June 24, 2021"