CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2021-215517.8/HIGHEPSS 79.6%CISA KEV
2021-05-04

Dell dbutil_2_3.sys Kernel Driver Privilege Escalation and Arbitrary Memory Read/Write Vulnerability (CVE-2021-21551)

[Affected Scope] Dell client platforms and firmware update utilities utilizing the dbutil_2_3.sys driver version 2.3

[Impact] Local authenticated attackers can bypass access controls to directly read/write kernel memory, leading to full SYSTEM privilege escalation, denial of service (BSOD), or information disclosure

[Mitigation] Immediately remediate by deleting the vulnerable dbutil_2_3.sys driver file and upgrading to the patched firmware update utility per Dell Advisory DSA-2021-088

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse