CVE-2021-21551 — Dell dbutil Driver Insufficient Access Control Vulnerability

provenance: imported · CVE: CVE-2021-21551

CVE-2021-21551: Dell dbutil Driver Insufficient Access Control Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Dell
Product	dbutil Driver
Date added	2022-03-31
Due date	2022-04-21
Ransomware campaign use	Unknown

Description

Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS), or information disclosure.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-21551

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-21551
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog