CVE-2021-21551

Description from NVD

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.

Information Acquisition Date:2022-09-30T17:42Z
CVSS 2.0: 4.6 MEDIUM CVSS 3.x: 7.8 HIGH

▼ CVSS3 Vec CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

▼ CVSS2 Vec AV:L/AC:L/Au:N/C:P/I:P/A:P

NVD References

 https://www.dell.com/support/kbdoc/en-us/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-control-vulnerability
     source:MISC
     tags:Mitigation    Vendor Advisory    
 http://packetstormsecurity.com/files/162604/Dell-DBUtil_2_3.sys-IOCTL-Memory-Read-Write.html
     source:MISC
     tags:Exploit    Third Party Advisory    VDB Entry    
 http://packetstormsecurity.com/files/162739/DELL-dbutil_2_3.sys-2.3-Arbitrary-Write-Privilege-Escalation.html
     source:MISC
     tags:Exploit    Third Party Advisory    VDB Entry    

Refer to Information on External Sites

CVE InfomationExploits or more Infomation
mitreEXPLOIT DATABASE
NVD0day.today
vulmon.comgithub
CVE DetailsTwitter
JVN ENG JPN
Reconshell

Software Tag: Apple(1 tweets)

List of frequently cited URLs

URLNum of Times Referred to
https://cvetrends.com50
https://lists.astaro.com/ASGV9-IPS-rules.html#037
http://twinybots.ch19
https://bit.ly/2RVaaGR5
https://buff.ly/3einQog4
https://github.com/waldo-irc/CVE-2021-215514
https://www.cisa.gov/known-exploited-vulnerabilities-catalog4
https://www.dell.com/support/kbdoc/en-uk/000186019/dsa-2021...4
http://t.me/hackgit3
https://s1.ai/lFVwVP3
https://ift.tt/3enhLHb3
https://twitter.com/cyb3rops/status/13896888186855178243
https://voidsec.com/reverse-engineering-and-exploiting-dell...3
https://news.sophos.com/es-es/2021/05/12/como-identificar-c...3
https://therecord.media/dell-patches-12-year-old-driver-vul...3
http://tweetedtimes.com/susession?s=tnp3
https://msendpointmgr.com/2021/05/05/detect-and-remove-dell...3
https://securityaffairs.co/wordpress/117514/security/cve-20...3
https://www.computerbase.de/2021-05/cve-2021-21551-dell-sch...3
https://www.crowdstrike.com/blog/cve-2021-21551-learning-th...3
https://labs.sentinelone.com/cve-2021-21551-hundreds-of-mil...3
https://connormcgarr.github.io/cve-2020-21551-sploit/3
https://scan.netsecurity.ne.jp/article/2021/06/22/45852.html3
https://www.cyberdefensemagazine.com/hundreds-of-millions/3

Information from Twitter

User URL Info Source Date
fletch_ai https://bit.ly/3JEyzJD Source fletch_ai        1622496576806453248 2023/02/06
lazarusholic https://securityintelligence.com/posts/defensive-considerat... Source lazarusholic     1637959737726881792 2023/03/21

List of frequently cited URLs

URLNum of Times Referred to
cvetrends.com50
lists.astaro.com37
twinybots.ch19
bit.ly5
buff.ly4
github.com4
www.cisa.gov4
www.dell.com4
t.me3
s1.ai3
ift.tt3
twitter.com3
voidsec.com3
news.sophos.com3
therecord.media3
tweetedtimes.com3
msendpointmgr.com3
securityaffairs.co3
www.computerbase.de3
www.crowdstrike.com3
labs.sentinelone.com3
connormcgarr.github.io3
scan.netsecurity.ne.jp3
www.cyberdefensemagazine.com3

Information from Twitter

User URL Info Source
fletch_ai bit.ly Show Tweet
lazarusholic securityintelligence.com Show Tweet
GitHub Search Results: Up to 10
NameURL
waldo-irc/CVE-2021-21551 https://github.com/waldo-irc/CVE-2021-21551
ch3rn0byl/CVE-2021-21551 https://github.com/ch3rn0byl/CVE-2021-21551
arnaudluti/PS-CVE-2021-21551 https://github.com/arnaudluti/PS-CVE-2021-21551
mathisvickie/CVE-2021-21551 https://github.com/mathisvickie/CVE-2021-21551
Kinsiinoo/PoshDellDBUtil https://github.com/Kinsiinoo/PoshDellDBUtil
GitHub Search Results: Up to 10
NameURL
waldo-irc/CVE-2021-21551 github.com
ch3rn0byl/CVE-2021-21551 github.com
arnaudluti/PS-CVE-2021-21551 github.com
mathisvickie/CVE-2021-21551 github.com
Kinsiinoo/PoshDellDBUtil github.com
2023/03/21 Score : 0
Added Har-sia Database : 2021/05/04
Last Modified : 2023/03/21
Highest Scored Date : 2021/05/05
Highest Score : 145