CVE-2021-21551
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
Actively exploited
- In the CISA exploited-vulnerabilities catalogue since Mar 31, 2022
- US federal agencies must remediate it by Apr 21, 2022 (BOD 22-01)
- First attack observed 330 days after disclosure
Apply updates per vendor instructions.
Source: CISA KEV · Jul 15, 2024 May 22, 2024 Mar 24, 2023 Mar 20, 2023 Mar 9, 2023 Mar 7, 2023
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HAffected products
| Vendors | Product | Versions |
|---|---|---|
| dell | dbutil | <= 2.3 |
| dell | alienware 14 | - |
| dell | alienware 17 51m r2 | - |
| dell | alienware area 51 | - |
| dell | alienware asm100 | - |
| dell | alienware asm100r2 | - |
| dell | alienware m14xr2 | - |
| dell | alienware m15 r4 | - |
| dell | alienware m17xr4 | - |
| dell | alienware m18xr2 | - |
| dell | canvas 27 | - |
| dell | cheng ming 3967 | - |
| dell | chengming 3967 | - |
| dell | chengming 3977 | - |
| dell | chengming 3980 | - |
| dell | chengming 3988 | - |
| dell | chengming 3990 | - |
| dell | chengming 3991 | - |
| dell | dock wd15 | - |
| dell | dock wd19 | - |
| dell | embedded box pc 5000 | - |
| dell | g15 5510 | - |
| dell | g3 3500 | - |
| dell | g3 3579 | - |
| dell | g3 3779 | - |
Related articles
Critical Dell System Update Flaw Opens a Remote Path to Root Access
Dell patched critical CVE-2026-86360 in System Update allowing unauthenticated remote root code execution. Upgrade to DSU 2.3.0.0 now.
Six Dell CSM Flaws Expose Storage Credentials, Tenant Controls, and Kubernetes Nodes
Dell patched six critical CSM flaws, including two CVSS 10.0 bugs enabling credential theft, token forgery, tenant takeover and Kubernetes root access.
SPECTRE, the backdoor that disables EDRs: inside UAT-10147's arsenal
Recently, Cisco Talos published a two-part analysis of the Chinese-speaking group UAT-10147 , which is active against Windows and Linux web servers on a
This product uses the NVD API but is not endorsed or certified by the NVD.