PT-2021-21193 · Dell · Dbutildrv2.Sys

Published 2021-08-09 · Updated 2026-04-13 · CVE-2021-36276

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell DBUtilDrv2.sys driver versions 2.5 and 2.6

Description The issue is related to an insufficient access control vulnerability in the Dell DBUtilDrv2.sys driver, which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required to exploit this issue.

Recommendations For versions 2.5 and 2.6, consider restricting access to the DBUtilDrv2.sys driver to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2021-36276

Affected Products

Dbutildrv2.Sys

References · 8

• https://dell.com/support/kbdoc/en-us/000190105/dsa-2021-152-dell-client-platform-security-update-for-an-insufficient-access-control-vulnerability-in-the-dell-dbutildrv2-sys-driver · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-36276 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36276 · Security Note
• https://t.me/aptreports/17590 · Telegram Post
• https://t.me/nekaspersky/4314 · Telegram Post
• https://t.me/aptreports/17587 · Telegram Post
• https://twitter.com/ctiwatchcloud/status/2043741096648310844 · Twitter Post
• https://t.me/cibsecurity/27026 · Telegram Post