CVE-2021-21551

7.8HIGH

Key Information:

Vendor: Dell
Status: Dbutil
Vendor: CVE Published:; 4 May 2021

Badges

👾 Exploit Exists🟡 Public PoC🦅 CISA Reported

Summary

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.

CISA Reported

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: Apply updates per vendor instructions.

Affected Version(s)

dbutil 2.3

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2021-21551
Created by waldo-irc

kernel-mii
Created by tijme

CVE-2021-21551
Created by mathisvickie