high8.1
CVE-2021-21557
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability.
Impact
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Poweredge R640 Firmware | before 2.11.2 |
| Dell | Poweredge R740 Firmware | before 2.11.2 |
| Dell | Poweredge R740xd Firmware | before 2.11.2 |
| Dell | Poweredge R940 Firmware | before 2.11.2 |
| Dell | Poweredge R540 Firmware | before 2.11.2 |
| Dell | Poweredge R440 Firmware | before 2.11.2 |
| Dell | Poweredge T440 Firmware | before 2.11.2 |
| Dell | Poweredge Xr2 Firmware | before 2.11.2 |
| Dell | Poweredge R740xd2 Firmware | before 2.11.2 |
| Dell | Poweredge R840 Firmware | before 2.11.2 |
| Dell | Poweredge R940xa Firmware | before 2.11.2 |
| Dell | Poweredge T640 Firmware | before 2.11.2 |