CVE-2021-21551VulnerabilityPublished 03/31/2022Updated 10/24/2026

CVE-2021-21551: Dell dbutil Driver Insufficient Access Control Vulnerability

Affects Dell dbutil DriverSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/31/2022
KEV deadline: 04/21/2022
EPSS: 80.1% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2021-21551 (opens in a new tab)

Description

The Dell dbutil driver contains an insufficient access control vulnerability that can allow an attacker to escalate privileges, cause denial-of-service (DoS), or disclose sensitive information. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

Summary

CVE-2021-21551 is an insufficient access control vulnerability in the Dell dbutil driver. This flaw can be exploited to escalate privileges, cause denial-of-service conditions, or lead to information disclosure. The vulnerability has been observed in active exploitation campaigns. However, no detailed version information or patch availability is provided in the available data.

Impact

Successful exploitation may result in privilege escalation, denial-of-service, or unauthorized information disclosure on affected systems. The vulnerability has been exploited in the wild, indicating active threat usage.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable driver and monitor for suspicious activity related to privilege escalation or DoS attempts involving the dbutil driver.

Weaknesses

CWE-782Unclassified weakness (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:25:25 UTC

Weaknesses

References

Related threats