Dell dbutil Driver Insufficient Access Control Vulnerability
CVSS Skor
—
EPSS İhtimal
%79.2
Risk Skoru
—
Yayın
4 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
DELL dbutil_2_3.sys 2.3 - Arbitrary Write to Local Privilege Escalation (LPE)
Script to patch your domain computers about the CVE-2021-21551. Privesc on machines that have the driver dbutil_2_3.sys, installed by some DELL tools (BIOS updater, SupportAssist...)
This repo contain a PoC I have done when blind analysis the dbutil_2_3.sys driver for vulnerability. This was created by personal analysis without looking at writeups or even know which CVE exist in this driver. All the knowledge I have is that this driver is vulnerable in some way.
Dell Driver EoP (CVE-2021-21551)
arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system
An extended proof-of-concept for the CVE-2021-21551 Dell ‘dbutil_2_3.sys’ Kernel Exploit
İlgili Benzer Açıklar
OS command injection in Dell Secure Connect Gateway
OS command injection in Dell ThinOS 10
Vulnerability in Dell RSA BSAFE Crypto J
OS command injection in Dell Secure Connect Gateway 5.0 Application
Command injection in Dell Secure Connect Gateway 5.0 Application
OS command injection in Dell Virtual Storage Integrator For VMware vSphere Client
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-21551"