Hello, welcome to the Friday, June 21st, 2019 edition of the Sandsenet Storm Center's Stormcast.

My name is Johannes Ulrich, and I'm recording from Washington, D.C.

Dell Today released a security bulletin for its support assist software.

The vulnerable component that's actually being updated here is PC Doctor.

Now, the vulnerability is probably one of the less severe vulnerabilities. I've seen in tools like this.

It's really just an untrusted DLL loading library. So if an attacker is able to place a DL on a system running support assistant,

then support assistant may load that DL and execute code included in it. What makes this, of

course, a bit more problematic is that Support Assist does have system access

and well is pretty much running unrestricted because it does have to have access to pretty much everything in the system.

The home version of the software should update automatically if you do run the business version, then you may have to apply

the patch manually. The scope of this problem may actually go beyond Dell in this particular

case. The researcher who found this vulnerability and reported to Dell Pelik Harder says that a PC doctor may also be included with PCs from other manufacturers.

And we can only hope that a PC doctor, the same company actually also makes the entire support assist package is applying these patches to

versions that they are delivering to other computer makers. Of course, for many of the listeners

here, it's probably standard practice to wipe a new PC and install the operating system from scratch.

Not 100% sure what exactly lose if you are removing support assist,

but often it does hurt you if you are then calling support

and they're asking for a particular troubleshooting or diagnostic report from that software.

And Cisco has been somewhat on a role for the last two days.

They released a total of 26 different updates.

If I counted them right, three of them are rated as critical. The one that concerns me the most is

remote command execution vulnerability in the RV 110W, RV130W and RV-215W routers.

...