CVE-2021-21551

CVE-2021-21551 A PoC that exploits Dell's dbutil23 driver. Will get code execution on a system that has HVCI disabled as shown below: Ouptut: The write-up for this code can be found here: https://ch3rn0byl.com/2021/05/a-dell-cve-2021-21551/...

CVE-2021-21551

CVE-2021-21551 Dell 드라이버 EoP CVE-2021-21551 설명 Dell dbutil23.sys 드라이버에는 불충분한 액세스 제어 취약점이 포함되어 있어 권한 상승, 서비스 거부 또는 정보 공개로 이어질 수 있습니다. 로컬 인증된 사용자 액세스가 필요합니다. 이 익스플로잇은 Windows 10 v1511에서 테스트되었습니다. 권고 링크...

CVE-2021-21551

CVE-2021-21551のPoC Dell dbutil23.sys ドライバを用いた Windows LPE のエクスプロイトです。 エクスプロイトの手法 読み取り/書き込みの実装、シェルコードの割り当て、SMEP回避のためのページフリップ、haldispatchポインタの上書き、シェルコードの実行。...

Metasploit Wrap-Up

Dell DBUtil23.sys IOCTL memmove privilege escalation Our very own zeroSteiner added a new module, which exploits insufficient access control in Dell's dbutil23.sys firmware update driver included in the Dell Bios Utility that comes pre-installed with most Windows machines. The driver accepts...

DELL dbutil_2_3.sys 2.3 Arbitrary Write / Privilege Escalation

Exploit Title: DELL dbutil23.sys 2.3 - Arbitrary Write to Local Privilege Escalation LPE Date: 10/05/2021 Exploit Author: Paolo Stagno aka VoidSec Version: include include include include define IOCTLCODE 0x9B0C1EC8 // IOCTLCODE value, used to reach the vulnerable function taken from IDA define...

Dell DBUtil_2_3.sys IOCTL Memory Read / Write Exploit

The DBUtil23.sys driver distributed by Dell exposes an unprotected IOCTL interface that can be abused by an attacker to read and write kernel-mode memory. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...