Cyber Risks · Cisco Talos

Vulnerability Spotlight: Dell Precision Optimizer and Invincea Vulnerabilities

Summary: Cisco Talos's Marcin 'Icewall' Noga discovered vulnerabilities in Dell Precision Optimizer and Invincea software, including Invincea-X and Dell Protected Workspace 6.1.3-24058 (TALOS-2016-0256) and Dell Protected Workspace 5.1.1-22303 (TALOS-2016-2046), the latter fixed in the 6.3.0 release. Affected Dell Precision Tower 5810 systems with Nvidia graphics cards involve the PPO Policy Processing Engine (3.5.5.0) and ati.dll PPR Monitoring Plugin (3.5.5.0) under TALOS-2016-2047, and Dell released an update with all versions from v4.0 onward not vulnerable.

Why it matters: These flaws sit in endpoint protection and firmware-adjacent software from Dell and Invincea, so the tools meant to guard machines carried the exposure - and Talos separately reported 5 ReVault vulnerabilities to Broadcom and Dell affecting ControlVault3 Firmware and its Windows APIs.

Read the original at Cisco Talos ↗

Topics
Cloud Security
Related