Ask HN: I found a vulnerability in Dell XPS BIOS, what should I do?

3 pointsSayrus4 comments

I found a way to "brick" any XPS laptop BIOS with zero data loss or corruption. It will be unable to boot, access BIOS or boot menu. You can repair it without hardware replacement as long as you know where the problem comes from.

Should I build a minimalist PoC before reporting it? Who do I contact to report it?

View on HN

All vulnerabilities affecting Dell, Dell EMC and RSA products should be reported via email to the Dell Product Security Incident Response Team (Dell PSIRT) at secure@dell.com.

For more information, please see: https://www.dell.com/support/contents/us/en/04/article/produ...

I just read that today after the technical support told me they had "no service for this kind of request". I'll build a PoC and try my luck there.

https://www.dell.com/support/incidents-online

https://bugcrowd.com/dell

Seems like the Bugcrowd link is only for their web services.

I sent them a ticket.

Reply on news.ycombinator.com