CVE-2021-21551

Dell dbutil Driver Insufficient Access Control Vulnerability

Dbutil

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.

4. Mai 2021

Ausgewertete Quellen

• Hersteller
  https://www.dell.com/support/kbdoc/en-us/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-control-vulnerability
• Hinweis
  http://packetstormsecurity.com/files/162604/Dell-DBUtil_2_3.sys-IOCTL-Memory-Read-Write.html
• Hinweis
  http://packetstormsecurity.com/files/162739/DELL-dbutil_2_3.sys-2.3-Arbitrary-Write-Privilege-Escalation.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21551
• CISA
  Dell dbutil Driver Insufficient Access Control Vulnerability
• NVD
  CVE-2021-21551