On: Remote Code Execution on Most Dell Computers

[_bxg1]

Sounds like the attacker has to be on the local network (or presumably VPN) to use the exploit? If so that's a nontrivial hurdle in many cases.

[Tehnix → _bxg1]

Like a WiFi at a café or airport?

[ru999gol → Tehnix]

it should be mentioned that even with WPA2-PSK wifi you are vulnerable to arp spoofing

[Tharkun → Tehnix]

Public WiFi networks really should use client isolation. Sadly, many don't.

[euroclydon → Tharkun]

You can just go to a public place and run your own hotspot.

[codedokode → euroclydon]

And use a name and SSID of some well-known public WiFi network. Then make a captive portal to force the user open an attacker-controlled page in a browser.

[Xylakant → Tharkun]

Even if client isolation is used, do you trust your local cafe’s WiFi AP?

[_bxg1 → Tehnix]

I was thinking in enterprise contexts, but, yes, that's fair. Still, anybody doing anything important on public WiFi should be using a VPN.

[zknz → _bxg1]

How will a vpn protect the user if the target laptop is listening on a public wifi connection?

[_bxg1 → zknz]

Actually maybe it wouldn't... I guess underneath the VPN it still has to be listening.

[albertgoeswoof → _bxg1]

The author details the options. If can find an XSS on dells website it’s possible.

[kibibu → _bxg1]

It looks to me like you could register any domain starting with "localhost" (eg. localhostevil.com) and it would work.

(apart from the download whitelist)