CVE-2021-21551
KEVHIGH 7.8EPSS 80.1%
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
- Affected
- Dell · dbutil
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 EMC
- 8.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS v2.0 NVD
- 4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 80.06% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2022-03-31
- Published
- 2021-05-04
- Updated
- 2025-10-21
Proof-of-concept exploits (17)
- http://packetstormsecurity.com/files/162604/Dell-DBUtil_2_3.sys-IOCTL-Memory-Read-Write.h…
- http://packetstormsecurity.com/files/162739/DELL-dbutil_2_3.sys-2.3-Arbitrary-Write-Privi…
- ColeHouston/Sunder226★ · 2025-01-18
- ColeHouston/theHandler-BOF48★ · 2025-08-05
- Eap2468/CVE-2021-215512★ · 2024-08-02
- IlanDudnik/CVE-2021-215510★ · 2025-01-12
- alfarom256/MCP-PoC77★ · 2022-10-31
- arnaudluti/PS-CVE-2021-215511★ · 2021-06-20
- ch3rn0byl/CVE-2021-2155124★ · 2021-05-21
- ihack4falafel/Dell-Driver-EoP-CVE-2021-2155132★ · 2022-02-24
- luke0x90/CVE-2021-215510★ · 2025-02-13
- mathisvickie/CVE-2021-2155160★ · 2021-11-16
- mzakocs/CVE-2021-21551-POC23★ · 2021-07-20
- nanabingies/CVE-2021-2155126★ · 2023-02-03
- tijme/kernel-mii85★ · 2023-05-07
- waldo-irc/CVE-2021-21551258★ · 2021-05-20
- bengabay1994/cve-2021-21551-PoC0★ · 2025-12-02
Metasploit modules (2)
- rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2021_21551_dbu…
- rapid7/metasploit-framework/blob/master/modules/post/windows/manage/dell_memory_protect.rb
ExploitDB entries (1)
Exploit collections (1)
- Dell BIOS驱动权限提升漏洞（CVE-2021-21551）.mdtzwlhack/Vulnerability