CVE-2021-21555

MEDIUM

Dell Poweredge R640 Firmware < 2.11.2 - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://www.dell.com/support/kbdoc/000187958

Scores

CVSS v3 6.1
EPSS 0.0006
EPSS Percentile 18.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L

Details

CWE
CWE-122 CWE-787
Status published
Products (9)
dell/poweredge_mx740c_firmware < 2.11.2
dell/poweredge_mx840c_firmware < 2.11.2
dell/poweredge_r640_firmware < 2.11.2
dell/poweredge_r740_firmware < 2.11.2
dell/poweredge_r740xd_firmware < 2.11.2
dell/poweredge_r840_firmware < 2.11.2
dell/poweredge_r940_firmware < 2.11.2
dell/poweredge_r940xa_firmware < 2.11.2
dell/poweredge_t640_firmware < 2.11.2
Published Jun 14, 2021
Tracked Since Feb 18, 2026