تحت تأثیر قرار دادن صدها میلیون رایانه شخصی Dell در سراسر جهان توسط اشکالات BIOS PrivEsc

?????? ?????????? ???? Dell ???? ??? ?????????????? ?????? ??? ?????? ????? ?????? ?? ?? ??? ???? ??????? ????????? ?? ??????????? ????? ???? ???. ??? ????????????? ?????? ?????? ?? ??????? ????? ?????? ???????? ???? kernel ?? ?? ??? ????? ? ???? ?? denial-of-service ????.

??? ??????? ???? ?????? SentinelOne ?? ????? ? ?????? ??? ???? ?? Dell ????? ??? ??? ? ?? ?? ?????? ??????????? firmware ?? ??? “dbutil_2_3.sys” ???? ???? ?? ?? ??? ??? ?????????? ?? ??? ??? ???. ???? ?????? ???? ?????? ?????? ??????? ??????? ???????? ? ???? ???????? ???? ??? ???? ????????? ?????.

Dell ?? ????? ???????? ?? ??? ???? ???[?]: “?????? dbutil_2_3.sys ???? ?? ?????????? ????? ?????? ?????? ??? ?? ???? ??? ???? ?? ????? ??? ??????? DoE ?? ????? ??????? ???. ?????? ????? ?????????? ???? ???????? ???.”

?? ?? ??? ??? ?????? ??????? ????? CVE-2021-21551 ?? ???? ??? ?? ????? CVSS ?????? ???????? ???. ???????????? ????????????? ?? ??? ??? ???:

• CVE-2021-21551: ?????? ??? ?????????? ???? ????? ? – ???? ?????
• CVE-2021-21551: ?????? ??? ?????????? ???? ????? ? – ???? ?????
• CVE-2021-21551: ?????? ??? ?????????? ???? ????? ? – ????? ????? ????
• CVE-2021-21551: ?????? ??? ?????????? ???? ????? ? – ????? ????? ????
• CVE-2021-21551: DoE – ????? ???? ??

???? ???? ???? ???? ????? SentinelOne? ?? ?????? ?? ??? ??????? ? ?? ???? ????? ????[?]: “??? ??????? ???? ???????? ?? ?? ????? ?? ??????? ??? ???? ????? ??? ?????? ???? ????? ??? ??? ?????? ??? ?? ?????? ???? ? ?? ?? ?? ???? kernel ???? ???. ?????? ?????????????? ????? ?? ??? ?????????????? ??????? ?? ????? ???? ??? ??? ??????? ?????? ???.”

???????? ??? ??????? ????? ?? ?????? ??? ?????? ???? ???? ???? ??? ?? ???? ??????? ?? ??? ??? ???? ??????????? ???? ?????. ???? ????? ?? ????? ?? ???? ???? ?? ?? ???? ??? ????? ?? ?? ????? ????????? ?????? ???? ???? ???? ? ?? ????? ?? ???????? ?? ?????????? driver ???? ?? ??? ????? ?????? ???? ?????????? ???. ?? ?? ????? ??? ??????? ????? ???????? ?? ????????? ???? ???? ????? ?? ?????? ??????? ??? ? ??????? ????? ?? ???? ?????? ???? ???.

????? ??? ????? ???? ?? ?????????? ?? ??? ?????????? ?? ??? ??????? ??? ???? ???? SentinelOne ??? ?? ??? ???? ?? ????? ???? (PoC) ?? ?? ????? ? ???? ???? ????? ??? ? ?? ??????? Dell ???? ???? ???? ??? ?????????? ?? ??????.

??? ????? ???? ???????[?]? ????? ???? Crowdtrike? ????? SentinelOne ???? ????? ??? ??? ?? ?????? ????? ?? ?? ??? ????? ?? Dell ????? ??????? ????? ???? ???? ????? ?????? ????? ?? Sunnyvale ?? ??? ???? ? ?????? ???? IOActive.

?????

[?]https://www.dell.com/support/kbdoc/en-in/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-control-vulnerability

[?]https://labs.sentinelone.com/cve-2021-21551-hundreds-of-millions-of-dell-computers-at-risk-due-to-multiple-bios-driver-privilege-escalation-flaws

[?] https://twitter.com/aionescu/status/1389713668917501954

[?] https://thehackernews.com/2021/05/bios-privesc-bug-affects-hundreds-of.html

??????? :

???? ??????

پویش #دو_درجه_کمتر