Dock update tools and firmware had local flaws lockdown can strand
Original title: Your Docking Station Has a Patching Problem
Four local CVEs hit Dell and Lenovo dock updaters or firmware; the post claims no exploitation.
Turning off Enable External USB Port while Type-C dock LAN stays on can stop the LAN port and block Dell Firmware Utility updates for the HD22Q, WD19, and WD22TB4. Separate advisories cover local flaws in dock update tools and firmware, including privilege escalation and log exposure on Dell Pro Smart Dock SD25 and SD25TB4 firmware before 01.00.08.01. All four cited issues need a foothold on the machine. The post makes no exploitation claim and also reviews DMA protection and older Thunderbolt research.
Unconfirmed: The post makes no exploitation claim and does not assess older DMA attacks against Thunderbolt 4 hosts.
- Dell firmware 01.00.36 is the named fix for the WD19 and WD22TB4 advisories.
- CVE-2023-43078 is scored 6.7 by Dell and 7.3 by NVD.
- CVE-2025-36573 affects SD25 and SD25TB4 firmware before 01.00.08.01.
- Kernel DMA Protection does not cover boot over Thunderbolt 3 ports.
Impact: Local privilege escalation or sensitive data written to logs
| Product | Affected | Fixed in |
|---|---|---|
| Dell WD19 and WD22TB4 firmware update utility | — | 01.00.36 |
| Lenovo ThinkPad Hybrid USB-C with USB-A dock update tool | — | — |
| Intel Thunderbolt controller firmware | — | — |
| Dell Pro Smart Dock SD25 and SD25TB4 | before 01.00.08.01 | — |
- 1.Inventory each dock with model, connection type, firmware version, and a named owner.
- 2.Check Windows Memory access protection and enable Intel VT-d in UEFI if it reads off.
- 3.Pilot USB and PCIe tunneling lockdowns, then confirm dock firmware updates still run.
- Organizations
- Microsoft
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-4569 | A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to… | 7.8 | <1% | ||
| CVE-2023-28396 | Improper access control in firmware for some Intel(R) Thunderbol(TM) Controllers versions before 41 may allow a privileged user to enable denial of service via… | 6.1 | <1% | ||
| CVE-2023-43078 | Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which… | 7.3 | <1% | ||
| CVE-2025-36573 | Dell Smart Dock Firmware, versions prior to 01.00.08.01, contain an Insertion of Sensitive Information into Log File vulnerability | 5.5 | <1% |
From the original article
5 min read at gbhackers.com
Summary: One BIOS setting can stop a dock from updating, and two dock CVEs live in the update tools themselves. Here’s how docks end up unpatched, and what to check on DMA protection. The easiest way to leave a dock unpatched is to lock down the laptop it’s plugged into.
By Kavichselvan · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.