Vulnerabilities in the ControlVault3 (CV) firmware in Dell laptops, discovered by security researchers from Cisco Talos, allow attackers with physical access to bypass Windows login on vulnerable ...

ControlVault3 firmware vulnerabilities impacting over 100 Dell laptop models can allow attackers to bypass Windows login and install malware that persists across system reinstalls.

The versions Dell ControlVault3 5.15.10.14 and Dell ControlVault3 Plus 6.2.26.36 and newer patch the vulnerabilities. Broadcom's BCM5820X is also vulnerable, but Dell has not named any software ...