Dell dbutil Driver Insufficient Access Control Vulnerability

HIGH 7.8EXPLOITED (CISA KEV)CVE-2021-21551 · Published 04/05/2021 · updated 17/06/2026

Dell dbutil Driver Insufficient Access Control Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 31/03/2022. Patch affected systems as an emergency.

In short

CVE-2021-21551 is a HIGH (CVSS 7.8) vulnerability affecting dbutil (dell).
Exploited in the wild: CISA added it to the KEV catalog on 31/03/2022.
Chance of exploitation in the next 30 days (EPSS): 79.6%, higher than 99.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
dbutil dell	`≤ 2.3`	No fix yet

Description

Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2021-21551 is a HIGH (CVSS 7.8) vulnerability affecting dbutil (dell).

Exploited in the wild: CISA added it to the KEV catalog on 31/03/2022.

Chance of exploitation in the next 30 days (EPSS): 79.6%, higher than 99.6% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

dbutil

dell

≤ 2.3

No fix yet