CVE-2021-21551: Dell dbutil Driver Insufficient Access Control Vulnerability
First published: Tue May 04 2021(Updated: )
Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS), or information disclosure.
Credit: security_alert@emc.com security_alert@emc.com security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell Dbutil 2 3.sys | ||
| Dell dbutil driver | ||
| Dell Dbutil 2 3.sys | <=2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/162604/Dell-DBUtil_2_3.sys-IOCTL-Memory-Read-Write.html
- http://packetstormsecurity.com/files/162739/DELL-dbutil_2_3.sys-2.3-Arbitrary-Write-Privilege-Escalation.html
- https://www.dell.com/support/kbdoc/en-us/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-control-vulnerability
- https://nvd.nist.gov/vuln/detail/CVE-2021-21551
- collector/nvd-index
- agent/type
- agent/title
- agent/weakness
- agent/severity
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/references
- agent/softwarecombine
- agent/tags
- collector/nvd-cve
- source/NVD
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/first-publish-date
- agent/event
- agent/description
- agent/last-modified-date
- collector/nvd-api
- vendor/dell
- canonical/dell dbutil 2 3.sys
- canonical/dell dbutil driver
- version/dell dbutil 2 3.sys/2.3