CVE-2021-21551

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or...

Basic Information

CVE State: PUBLISHED
Reserved Date: January 04, 2021
Published Date: May 04, 2021
Last Updated: February 07, 2025
Vendor: Dell
Product: dbutil
Description: Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.

CVSS Scores

CVSS v3.1

8.8 - HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC Information

Exploitation: active
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (added 2022-03-31 00:00:00 UTC) Source
Proof of Concept Available: Yes (added 2023-01-07 02:42:59 UTC) Source

References

https://www.dell.com/support/kbdoc/en-us/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-control-vulnerability http://packetstormsecurity.com/files/162604/Dell-DBUtil_2_3.sys-IOCTL-Memory-Read-Write.html http://packetstormsecurity.com/files/162739/DELL-dbutil_2_3.sys-2.3-Arbitrary-Write-Privilege-Escalation.html

Known Exploited Vulnerability Information

Source	Added Date
CISA	2022-03-31 00:00:00 UTC

Scanner Integrations

Scanner	URL	Date Detected
Metasploit	https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2021_21551_dbutil_memmove.rb	2025-04-29 11:01:40 UTC

Potential Proof of Concepts

Warning: These PoCs have not been tested and could contain malware. Use at your own risk.

cve_2021_21551_dbutil_memmove

Type: metasploit • Created: Unknown

Metasploit module for CVE-2021-21551

nanabingies/CVE-2021-21551

Type: github • Created: 2023-01-07 02:42:59 UTC • Stars: 25

Dell Driver EoP (CVE-2021-21551)

ihack4falafel/Dell-Driver-EoP-CVE-2021-21551

Type: github • Created: 2021-09-03 01:47:03 UTC • Stars: 32

Dell Driver EoP (CVE-2021-21551)

mzakocs/CVE-2021-21551-POC

Type: github • Created: 2021-06-02 05:13:07 UTC • Stars: 24

An extended proof-of-concept for the CVE-2021-21551 Dell ‘dbutil_2_3.sys’ Kernel Exploit

mathisvickie/CVE-2021-21551

Type: github • Created: 2021-05-30 10:15:10 UTC • Stars: 56

arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system

ch3rn0byl/CVE-2021-21551

Type: github • Created: 2021-05-21 03:13:58 UTC • Stars: 26

waldo-irc/CVE-2021-21551

Type: github • Created: 2021-05-13 13:23:38 UTC • Stars: 237

Exploit to SYSTEM for CVE-2021-21551