CVE-2021-21551
Quick assessment
Affected
Dell dbutil
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dell dbutil Driver是美国戴尔（Dell）公司的一个应用软件。提供了戴尔公司设备的一个驱动程序。 Dell dbutil Driver 存在安全漏洞，该漏洞源于戴尔dbutil驱动程序dbutil 2 .sys中不正确的访问限制。以下产品及版本受到影响：DBUtil: 2.3 。
Public Exploits 2
ExploitDB · 1
EDB-49893 [local]
Metasploit · 1
cve_2021_21551_dbutil_memmove.rb [exploit]
In-the-Wild Activity Observed
cisa_kev · confirmed
Possible ATT&CK Techniques 1 AI
T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-21551
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
无充分访问控制条件下暴露IOCTL
Source: CVE Program / CVE List V5
Vulnerability Title
Dell dbutil Driver 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dell dbutil Driver是美国戴尔（Dell）公司的一个应用软件。提供了戴尔公司设备的一个驱动程序。 Dell dbutil Driver 存在安全漏洞，该漏洞源于戴尔dbutil驱动程序dbutil 2 .sys中不正确的访问限制。以下产品及版本受到影响：DBUtil: 2.3 。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
II. Public POCs for CVE-2021-21551
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Exploit to SYSTEM for CVE-2021-21551 | https://github.com/waldo-irc/CVE-2021-21551 | POC Details |
| 2 | None | https://github.com/ch3rn0byl/CVE-2021-21551 | POC Details |
| 3 | Script to patch your domain computers about the CVE-2021-21551. Privesc on machines that have the driver dbutil_2_3.sys, installed by some DELL tools (BIOS updater, SupportAssist...) | https://github.com/arnaudluti/PS-CVE-2021-21551 | POC Details |
| 4 | arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system | https://github.com/mathisvickie/CVE-2021-21551 | POC Details |
| 5 | An extended proof-of-concept for the CVE-2021-21551 Dell ‘dbutil_2_3.sys’ Kernel Exploit | https://github.com/mzakocs/CVE-2021-21551-POC | POC Details |
| 6 | Dell Driver EoP (CVE-2021-21551) | https://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551 | POC Details |
| 7 | Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551. | https://github.com/tijme/kernel-mii | POC Details |
| 8 | Dell Driver EoP (CVE-2021-21551) | https://github.com/nanabingies/CVE-2021-21551 | POC Details |
| 9 | Dell dbutil_2_3.sys driver exploit | https://github.com/houseofxyz/CVE-2021-21551 | POC Details |
| 10 | Proof of concept exploit for CVE-2021-21551 | https://github.com/Eap2468/CVE-2021-21551 | POC Details |
| 11 | Exploit implementation for CVE-2021-21551 | https://github.com/IlanDudnik/CVE-2021-21551 | POC Details |
| 12 | None | https://github.com/luke0x90/CVE-2021-21551 | POC Details |
| 13 | This repo contain a PoC I have done when blind analysis the dbutil_2_3.sys driver for vulnerability. This was created by personal analysis without looking at writeups or even know which CVE exist in this driver. All the knowledge I have is that this driver is vulnerable in some way. | https://github.com/bengabay1994/cve-2021-21551-PoC | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-21551
请登录查看更多情报信息。
Exploits & Public PoCs for CVE-2021-21551 (2)
Other References for CVE-2021-21551 (1)
IV. Related Vulnerabilities
Same product: dbutil
V. Comments for CVE-2021-21551
No comments yet