CVE-2021-21551

high · 8.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2022-03-31Remediation due 2022-04-21

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.

8.8

CVSS

79.2%

EPSS (exploit prob.)

100th

EPSS percentile

2021-05-04

Published

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-782

Affected products

Vendor	Product	Affected versions
dell	dbutil	<= 2.3
dell	alienware_14	all versions
dell	alienware_17_51m_r2	all versions
dell	alienware_area_51	all versions
dell	alienware_asm100	all versions
dell	alienware_asm100r2	all versions
dell	alienware_m14xr2	all versions
dell	alienware_m15_r4	all versions
dell	alienware_m17xr4	all versions
dell	alienware_m18xr2	all versions
dell	canvas_27	all versions
dell	cheng_ming_3967	all versions
dell	chengming_3967	all versions
dell	chengming_3977	all versions
dell	chengming_3980	all versions
dell	chengming_3988	all versions
dell	chengming_3990	all versions
dell	chengming_3991	all versions
dell	dock_wd15	all versions
dell	dock_wd19	all versions
dell	embedded_box_pc_5000	all versions
dell	g15_5510	all versions
dell	g3_3500	all versions
dell	g3_3579	all versions
dell	g3_3779	all versions
dell	g5_5000	all versions
dell	g5_5090	all versions
dell	g5_5500	all versions
dell	g5_5587	all versions
dell	g5_5590	all versions
dell	g7_7500	all versions
dell	g7_7588	all versions
dell	g7_7590	all versions
dell	g7_7700	all versions
dell	g7_7790	all versions
dell	gaming_g3_3590	all versions
dell	inspiron_11-3162	all versions
dell	inspiron_1122	all versions
dell	inspiron_1210	all versions
dell	inspiron_13_5370	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-21551