Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/162604/Dell-DBUtil_2_3.sys-IOCTL-Memory-Read-Write.html | Exploit Third Party Advisory VDB Entry |
| http://packetstormsecurity.com/files/162739/DELL-dbutil_2_3.sys-2.3-Arbitrary-Write-Privilege-Escalation.html | Exploit Third Party Advisory VDB Entry |
| https://www.dell.com/support/kbdoc/en-us/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-control-vulnerability | Mitigation Vendor Advisory |
Configurations
History
17 Sep 2024, 19:47
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:dell:dbutil_2_3.sys:*:*:*:*:*:*:*:* |
16 Sep 2024, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required. |
05 Oct 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required. | |
| CWE | CWE-782 |
Information
Published : 2021-05-04 16:15
Updated : 2024-09-17 19:47
NVD link : CVE-2021-21551
Mitre link : CVE-2021-21551
CVE.ORG link : CVE-2021-21551
JSON object : View
Products Affected
dell
- dbutil_2_3.sys
CWE