CVE-2021-21551 PoC — Dell dbutil Driver 安全漏洞

Source

https://github.com/Eap2468/CVE-2021-21551

Associated Vulnerability

Title:Dell dbutil Driver 安全漏洞 (CVE-2021-21551)
Description:Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.

Description

Proof of concept exploit for CVE-2021-21551

Readme

# CVE-2021-21551
Proof of concept exploit for CVE-2021-21551, vulnerability comes from user provided addresses being provided as arguments to a memmove call allowing for an arbitary read/write (ioctls 0x9B0C1EC4 and 0x9B0C1EC8)  as well as the physical address parameter for a MmMapIoSpace call that provides another arbitary read/write (ioctls 0x9B0C1F40 and 0x9B0C1F44)

![Pasted image 20240802160935](https://github.com/user-attachments/assets/4c1cebe4-b4bf-48ec-b5a8-cc7643bd2ff4)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!