CVE-2021-21551 Dell dbutil Driver Insufficient Access Control
A local attacker can exploit insufficient access control in the Dell dbutil driver to escalate privileges, cause denial of service, or disclose information.
- Exploited in the wild
- Since 31 Mar 2022
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-21551?
CVE-2021-21551 is a high-severity vulnerability in Dell dbutil, published on 4 May 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
Weakness: CWE-782
Which versions are affected by CVE-2021-21551?
It affects 1 product.
Products include Dell Dbutil.
How do I fix CVE-2021-21551?
No fix has been published for CVE-2021-21551 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 21 Apr 2022.
Is CVE-2021-21551 being exploited?
Yes. Attackers have exploited CVE-2021-21551 in the wild since at least 31 Mar 2022.
Public exploit code: 1 Metasploit module, 1 Exploit-DB entry and 12 proofs of concept on GitHub.
Sources
Also known as GHSA-pp2j-9hqv-7x55.