Dell has released urgent firmware and driver updates to fix multiple critical security flaws, collectively named “ReVault,” in its ControlVault3 authentication chips. The vulnerabilities, discovered by Cisco Talos, impact more than 100 models across Dell’s Precision, Latitude, and other professional laptop series, and could allow attackers to bypass hardware-based security and take control of sensitive authentication functions.
ControlVault3 acts as a secure enclave for storing passwords, biometric data, and cryptographic keys. Cisco Talos identified five separate vulnerabilities in the firmware and associated Windows APIs, which could be exploited to bypass Windows login, steal stored credentials, or install persistent malware at the firmware level. Dell warns that these flaws can be exploited through physical access to the laptop’s Unified Security Hub over USB, or remotely via certain API calls, making prompt patching essential.
To address the issue, Dell has published security advisory DSA-2025-053, which lists all affected models and provides direct download links for updated firmware and drivers. The company urges all users of impacted laptops to install the updates immediately, stressing that patching is the most effective way to prevent potential compromise. Dell has also established a dedicated support channel to assist customers with the update process.
Security experts recommend prioritizing the installation of these updates as soon as possible. For additional protection, users should monitor systems for unusual activity, ensure endpoint security software is up to date, and enable multi-factor authentication where feasible. Because the flaws affect hardware responsible for protecting critical login and encryption data, failing to patch leaves systems vulnerable even if the operating system is reinstalled.
The swift release of patches highlights the importance of maintaining current firmware alongside software updates. As laptops increasingly integrate biometric and cryptographic authentication systems, ensuring that underlying hardware security modules like ControlVault3 are patched is vital to preventing long-term breaches and safeguarding user credentials.
Sources: Cisco Talos Blog, IT Pro, The Hacker News, BleepingComputer, Security Affairs
–
By Ali Nassar-Smith
