' can be invoked by a non-privileged user,' the researchers say. The team notes that the most crucial issue in the driver is that access-control list (ACL) requirements, which set permissions, are not invoked during Input/Output Control (IOCTL) requests.Īs drivers often operate with high levels of privilege, this means requests can be sent locally by non-privileged users. 'These multiple critical vulnerabilities in Dell software could allow attackers to escalate privileges from a non-administrator user to kernel mode privileges,' the researchers say. Two are memory corruption issues in the driver, two are security failures caused by a lack of input validation, and one logic issue was found that could be exploited to trigger denial-of-service. The DBUtil BIOS driver comes on many Dell machines running Windows and contains a component - the dbutil_2_3.sys module - which is installed and loaded on-demand by initiating the firmware update process and then unloaded after a system reboot - and this module was subject to Dekel's scrutiny.ĭell has assigned one CVE ( CVE-2021-21551), CVSS 8.8, to cover the five vulnerabilities disclosed by SentinelLabs. The team says that the driver has been vulnerable since 2009, although there is no evidence, at present, that the bugs have been exploited in the wild.

On Tuesday, SentinelLabs said the vulnerabilities were discovered by security researcher Kasif Dekel, who explored Dell's DBUtil BIOS driver - software used in the vendor's desktop and laptop PCs, notebooks, and tablet products. The ransomware threat is growing: What needs to happen to stop attacks getting worse? (ZDNet YouTube).The best VPNs for business and home use.Cyber security 101: Protect your privacy.Surfshark VPN review: It's cheap, but is it good?.T-Mobile hack: Everything you need to know.

Dell command update issues