3 ms·
Ask HN: I found a vulnerability in Dell XPS BIOS, what should I do?
I found a way to "brick" any XPS laptop BIOS with zero data loss or corruption. It will be unable to boot, access BIOS or boot menu.
You can repair it without hardware replacement as long as you know where the problem comes from.
Should I build a minimalist PoC before reporting it?
Who do I contact to report it?
- based2 7y agohttps://www.dell.com/support/incidents-online https://www.dell.com/support/incidents-online https://bugcrowd.com/dell https://bugcrowd.com/dell
- Sayrus 7y agoSeems like the Bugcrowd link is only for their web services. I sent them a ticket.
- net123 7y agoAll vulnerabilities affecting Dell, Dell EMC and RSA products should be reported via email to the Dell Product Security Incident Response Team (Dell PSIRT) at secure@dell.com. For more information, please see: https://www.dell.com/support/contents/us/en/04/article/product-support/self-support-knowledgebase/security-antivirus/alerts-vulnerabilities/dell-vulnerability-response-policy https://www.dell.com/support/contents/us/en/04/article/produ...
- Sayrus 7y agoI just read that today after the technical support told me they had "no service for this kind of request". I'll build a PoC and try my luck there.