HN Explorer

Ask HN: I found a vulnerability in Dell XPS BIOS, what should I do?

3 points by Sayrus ↗ HN
I found a way to "brick" any XPS laptop BIOS with zero data loss or corruption. It will be unable to boot, access BIOS or boot menu. You can repair it without hardware replacement as long as you know where the problem comes from.

Should I build a minimalist PoC before reporting it? Who do I contact to report it?

4 comments

[ 3.0 ms ] story [ 18.7 ms ] thread
net123
All vulnerabilities affecting Dell, Dell EMC and RSA products should be reported via email to the Dell Product Security Incident Response Team (Dell PSIRT) at secure@dell.com.

For more information, please see: https://www.dell.com/support/contents/us/en/04/article/produ...

Sayrus
I just read that today after the technical support told me they had "no service for this kind of request". I'll build a PoC and try my luck there.