Description
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | dbutil | 2.3 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Dell DBUtil_2_3.sys IOCTL memmove
exploit/windows/local/cve_2021_21551_dbutil_memmove
Exploit-DB 1
- DELL dbutil_2_3.sys 2.3 - Arbitrary Write to Local Privilege Escalation (LPE) EDB-49893 · local · May 21, 2021
GitHub 12 repositories · most starred shown
-
waldo-irc/CVE-2021-21551 ★ 258 · May 13, 2021
Exploit to SYSTEM for CVE-2021-21551
-
tijme/kernel-mii ★ 85 · Jun 25, 2022
Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.
-
mathisvickie/CVE-2021-21551 ★ 59 · May 30, 2021
arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system
-
ihack4falafel/Dell-Driver-EoP-CVE-2021-21551 ★ 33 · Sep 3, 2021
Dell Driver EoP (CVE-2021-21551)
-
nanabingies/CVE-2021-21551 ★ 26 · Jan 7, 2023
Dell Driver EoP (CVE-2021-21551)
-
ch3rn0byl/CVE-2021-21551 ★ 24 · May 21, 2021
-
mzakocs/CVE-2021-21551-POC ★ 23 · Jun 2, 2021
An extended proof-of-concept for the CVE-2021-21551 Dell ‘dbutil_2_3.sys’ Kernel Exploit
-
Eap2468/CVE-2021-21551 ★ 2 · Aug 2, 2024
Proof of concept exploit for CVE-2021-21551
-
arnaudluti/PS-CVE-2021-21551 ★ 1 · May 28, 2021
Script to patch your domain computers about the CVE-2021-21551. Privesc on machines that have the driver dbutil_2_3.sys, installed by some DELL tools (BIOS updater, SupportAssist...)
-
IlanDudnik/CVE-2021-21551 ★ 0 · Jan 11, 2025
Exploit implementation for CVE-2021-21551
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- https://www.dell.com/support/kbdoc/en-us/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-control-vulnerability
- http://packetstormsecurity.com/files/162604/Dell-DBUtil_2_3.sys-IOCTL-Memory-Read-Write.html
- http://packetstormsecurity.com/files/162739/DELL-dbutil_2_3.sys-2.3-Arbitrary-Write-Privilege-Escalation.html