Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2021-21529

Quick assessment

Affected
Dell DellEMC System Update - DSU
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Dell System Update是美国戴尔（Dell）公司的一个应用软件包。提供应用更新功能。 Dell System Update (DSU) 1.9 and earlier version 存在安全漏洞，该漏洞源于具有较低权限的本地身份验证恶意用户可能会利用此漏洞运行该漏洞应用程序的多个实例，从而导致系统耗尽内存。

CVSS 3.8 · Low EPSS 0.21% · P10

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2021-21529

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Dell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: CVE Program / CVE List V5
Vulnerability Title
Dell System Update 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dell System Update是美国戴尔（Dell）公司的一个应用软件包。提供应用更新功能。 Dell System Update (DSU) 1.9 and earlier version 存在安全漏洞，该漏洞源于具有较低权限的本地身份验证恶意用户可能会利用此漏洞运行该漏洞应用程序的多个实例，从而导致系统耗尽内存。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Dell DellEMC System Update - DSU unspecified ~ DSU 1.9.1 -

II. Public POCs for CVE-2021-21529

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-21529

请登录查看更多情报信息。

Other References for CVE-2021-21529 (1)

Same Patch Batch · Dell · 2021-04-02 · 3 CVEs total

CVE-2021-21532 5.0 MEDIUM Dell Wyse ThinOS 输入验证错误漏洞
CVE-2021-21533 4.3 MEDIUM Wyse Management Suite 输入验证错误漏洞

IV. Related Vulnerabilities

Same product: DellEMC System Update - DSU
Same vendor: Dell
Same weakness: CWE-400

V. Comments for CVE-2021-21529

No comments yet

Leave a comment