CVE-2021-21551
HighActively exploited (CISA KEV)
Description
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
SeverityHigh
CVSS8.8
Exploit probability—
ProductDell dbutil Driver
PublishedMay 4, 2021
First seenMay 4, 2021
Added to KEVMar 31, 2022
Weakness typeCWE-782CWE-782
How to fix
CISA required action
Apply updates per vendor instructions.
CISA due date: Apr 21, 2022Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell dbutil | v ≤ 2.3 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.