UNSOLVED

CallOfTheLoon

updated

3 years ago

C

CallOfTheLoon

1 Rookie

7 Posts

0

112

August 29th, 2023 19:28

BIOS was updated by Windows update

A strange thing happened to me this morning. Windows update alerted me that I needed to restart my system to complete an update. As usual, it didn't mention what the update was and I didn't bother to check before I restarted. As I waited for what I thought to be an update to Windows, I was shown the customary BIOS firmware update in progress screen! The strange thing is that when I try to update my BIOS using Dell Command Update it fails as I have a BIOS password set. I always download the installer which asks me for my password before the installation starts. Microsoft Window update did not ask for a password and somehow succeeded to update the BIOS! I was under the impression that by setting a password I was protecting the system firmware but I guess any hacker who knows how is able to bypass this feature. What gives?

  • bradthetechnut

    9 Technologist

    9649 Posts

    40713 Points

    0

    0

    Posted August 29th, 2023 19:33

    It might be because you were signed into Windows that it completed the BIOS update.

  • CallOfTheLoon

    1 Rookie

    7 Posts

    0

    0

    Posted August 29th, 2023 20:01

    @bradthetechnut​ Yes I was logged into Windows when I received the Windows update alert just as I am when I run the Dell Command Update application. Microsoft should not know the password for my BIOS so how is it that they were able to update my firmware without it. Dell Command Update asks for the password but fails to apply the update. I always download the installer to update the BIOS and it too asks for my password. Dell documentation left me with the impression that if I applied a password it would protect my system from unautorized updates or changes to settings but apparently any hacker with the knowledge are able to.

    I should also point out that I always time firmware updates when the weather is good to minimize the chance of a power failure during an update which would potentialy render my system unbootable. Since Microsoft does not ask permission to install the update this could be a problem. Luckily, today we had good weather so just by chance the update succeeded.

    (edited)