CVE-2021-21557
14.06.2021, 19:15
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.Enginsight
| Vendor | Product | Version |
|---|---|---|
| dell | poweredge_r640_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_r740_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_r740xd_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_r940_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_r540_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_r440_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_t440_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_xr2_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_r740xd2_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_r840_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_r940xa_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_t640_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_c6420_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_fc640_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_m640_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_m640p_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_mx740c_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_mx840c_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_c4140_firmware | 𝑥 < 2.11.2 |
| dell | poweredge_t140_firmware | 𝑥 < 2.5.1 |
| dell | poweredge_t340_firmware | 𝑥 < 2.5.1 |
| dell | poweredge_r240_firmware | 𝑥 < 2.5.1 |
| dell | poweredge_r340_firmware | 𝑥 < 2.5.1 |
| dell | poweredge_r6415_firmware | 𝑥 < 1.16.1 |
| dell | poweredge_r7415_firmware | 𝑥 < 1.16.1 |
| dell | poweredge_r7425_firmware | 𝑥 < 1.16.1 |
| dell | poweredge_r6515_firmware | 𝑥 < 2.2.4 |
| dell | poweredge_r7515_firmware | 𝑥 < 2.2.4 |
| dell | poweredge_r6525_firmware | 𝑥 < 2.2.5 |
| dell | poweredge_r7525_firmware | 𝑥 < 2.2.5 |
| dell | poweredge_c6525_firmware | 𝑥 < 2.2.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-20 - Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- CWE-125 - Out-of-bounds ReadThe software reads data past the end, or before the beginning, of the intended buffer.