Collected research

eDellRoot

Security Bug in Dell PCs Shipped Since 8/15

Dell shipped consumer and commercial PCs from August 2015 carrying a root certificate, eDellRoot, whose private key was left on the machine. Anyone can extract that key, sign certificates for any HTTPS site and intercept or alter a Dell owner's traffic on a shared network, repeating Lenovo's Superfish failure.

Record

Document

Security Bug in Dell PCs Shipped Since 8/15

Published by

krebsonsecurity.com

Topic

Other

In the archive

• Collected in the 2015 research round

Tags

• tls
• https
• supply-chain
• auth-bypass
• info-leak
• vendor-advisory
• case-study
• owasp-a01-2021
• owasp-a02-2021
• owasp-a06-2021

This page is the archive's own catalogue record. The research is the work of krebsonsecurity.com, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 10 August 2026.