CVE-2021-21551

CVE-2021-21551 Dell의 dbutil23 드라이버를 익스플로잇하는 PoC입니다. HVCI가 비활성화된 시스템에서 코드 실행을 얻습니다아래 참조: 출력: 이 코드에 대한 설명은 다음에서 확인할 수 있습니다: https://ch3rn0byl.com/2021/05/a-dell-cve-2021-21551/...

CVE-2021-21551

CVE-2021-21551 Dell Driver EoP CVE-2021-21551 説明 Dell の dbutil23.sys ドライバーには不十分なアクセス制御の脆弱性が含まれており、権限昇格、サービス拒否、または情報漏えいを引き起こす可能性があります。ローカルの認証済みユーザーによるアクセスが必要です。 このエクスプロイトは Windows 10 v1511 でテストされています。 アドバイザリへのリンク...

CVE-2021-21551

CVE-2021-21551 PoC Dell dbutil23.sys 드라이버를 사용한 Windows LPE. 익스플로잇 접근 방식 읽기/쓰기 구현, 셸코드 할당, smep 우회를 위한 페이지 플립, haldispatch 포인터 덮어쓰기, 셸코드 실행...

Metasploit Wrap-Up

Dell DBUtil23.sys IOCTL memmove privilege escalation Our very own zeroSteiner added a new module, which exploits insufficient access control in Dell's dbutil23.sys firmware update driver included in the Dell Bios Utility that comes pre-installed with most Windows machines. The driver accepts...

DELL dbutil_2_3.sys 2.3 Arbitrary Write / Privilege Escalation

Exploit Title: DELL dbutil23.sys 2.3 - Arbitrary Write to Local Privilege Escalation LPE Date: 10/05/2021 Exploit Author: Paolo Stagno aka VoidSec Version: include include include include define IOCTLCODE 0x9B0C1EC8 // IOCTLCODE value, used to reach the vulnerable function taken from IDA define...

Dell DBUtil_2_3.sys IOCTL Memory Read / Write Exploit

The DBUtil23.sys driver distributed by Dell exposes an unprotected IOCTL interface that can be abused by an attacker to read and write kernel-mode memory. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

CVE-2021-21551: Exposed IOCTL with Insufficient Access Control

Dell dbutil23.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required...