Millions at risk of critical PC security vulnerability, Dell warns

Where is the problem?

The security vulnerability is located in the installer for Dell’s utility app that users can use to manage keyboards, webcams, and other peripheral devices. The vulnerability allows an attacker with limited rights to obtain higher system rights through a targeted attack.

Dell confirms that all versions of DDPM prior to 2.1.2.12 are affected. Version 2.1.2.12 is the first release to address the problem.

Who’s affected? What should they do?

Windows PCs that have the Dell Display and Peripheral Manager (DDPM) installed are affected. That typically means Dell business systems or users who manage peripherals via Dell’s tool, which presumably includes millions of PC users around the world.

Anyone using the program should update to the latest version ASAP or deactivate the tool until the update is installed.

According to initial assessment, the vulnerability is currently not being exploited in the wild. Nevertheless, Dell advises users to update quickly, as the program is likely to be installed by default on many Windows PCs.

High-risk case with quick fix

The fact that Dell categorizes the vulnerability as “high impact” and at the same time publishes a quick fix shows how dramatic the case is. It’s especially risky in corporate environments where Dell peripherals are widely used. An attack can have significant consequences there.

If you want to be on the safe side, temporarily deactivate the DDPM tool and install the update before attackers gets a chance.