- Uninstall dell security device driver pack update#
- Uninstall dell security device driver pack upgrade#
Option 2: Manually remove the vulnerable dbutil_2_3.sys driver: According to Option 2 in the remediation steps on Dell’s website, we simply need to do the following Lets start off with the detection script. Basically it works on the basis of a detection and a remediation script, other than that you can “script your own destiny” (credit to for that one liner). Proactive Remediations is a feature of Endpoint Analytics and if you haven’t already discovered this gem, then I suggestion you check out other posts on our site for more detail on the type of things we are doing with it.
Uninstall dell security device driver pack update#
The issue documented both on Dell’s own site ( DSA-2021-088: Dell Client Platform Security Update for an Insufficient Access Control Vulnerability in the Dell dbutil Driver | Dell UK) and Sentinel One’s site ( CVE-2021-21551- Hundreds Of Millions Of Dell Computers At Risk Due to Multiple BIOS Driver Privilege Escalation Flaws – SentinelLabs ()) is of a high risk nature and therefore organisations around the globe need to detect and remove the threat as soon as possible.
Uninstall dell security device driver pack upgrade#
The reason of course is the recently disclosed CVE impacting on Dell systems firmware upgrade packages, in particular the dbutil_2_3.sys file, which could be used by attackers to lead to a kernel-mode privileged attack on your systems. Today we have yet another reason why you should be using Endpoint Analytics and Proactive Remediations, well at least if you are using Dell systems.
0 kommentar(er)
