Dell: Recent patches break iSCSI login on Dell PS Series arrays

Topic

New Reply

There’s a thread on the Dell support site that says: There are currently three MS KBs that once installed result in iSCSI login failures with Dell PS
[See the full post at: Dell: Recent patches break iSCSI login on Dell PS Series arrays]

Reply | Quote

Replies

Dell has got some new issues that are not Windows KB related to deal with but do require some patching as well, and this may just affect more than Dell as that’s some nice third party vendor to Dell that supplying the software that is labelled/branded SupportAssist with a rather egregious security issue. “The software itself is written and maintained by PC Doctor” according to The Register(1).

“Dell’s troubleshooting software SupportAssist, bundled with the US tech titan’s home and business computers, has a security flaw that can be exploited by malware and rogue logged-in users to gain administrator powers.” (1)
…
“the software insecurely loads .dll files when run. Researcher Peleg Hadar told The Register SupportAssist, which runs with SYSTEM-level privileges, will automatically pull in unsigned code libraries from user-controlled folders. That means malware or dodgy users can leave their own .dll files in a path, wait for SupportAssist to blindly load them, and thus execute code within an admin context.” (1)

The house key is under the mat and that mat is embossed with the words: house key under this mat!

(1)
“Millions of Windows Dell PCs need patching: Give-me-admin security gremlin found lurking in bundled support tool”
https://www.theregister.co.uk/2019/06/20/dell_supportassist_security_hole/

1 user thanked author for this post.

doriel

Reply | Quote

So unustalling these updates will fix this issue? I wonder if connection and settings will be lost, or if it will remain untouched after removing these updates.

This issue with SupportAssist is known for month or two. Article on bleeping computers says:

“An unauthenticated attacker, sharing the network access layer with the vulnerable system, can compromise the vulnerable system by tricking a victim user into downloading and executing arbitrary executables via SupportAssist client from attacker hosted sites.”

Youtube: Dell Remote Code Execution Demo

Dell Latitude 3420, Intel Core i7 @ 2.8 GHz, 16GB RAM, W10 22H2 Enterprise

HAL3000, AMD Athlon 200GE @ 3,4 GHz, 8GB RAM, Fedora 29

PRUSA i3 MK3S+

Reply | Quote