CVE-2021-21555
Medium
Description
Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.
SeverityMedium
CVSS6.1
Exploit probability24. percentile0.3%
ProductDell Poweredge R640 Firmware
PublishedJun 14, 2021
First seenJun 14, 2021
Weakness typeCWE-122CWE-122
How to fix
Update
- dell poweredge_r640_firmware2.11.2 or later
- dell poweredge_r740_firmware2.11.2 or later
- dell poweredge_r740xd_firmware2.11.2 or later
- dell poweredge_r940_firmware2.11.2 or later
- dell poweredge_r840_firmware2.11.2 or later
- dell poweredge_r940xa_firmware2.11.2 or later
- dell poweredge_t640_firmware2.11.2 or later
- dell poweredge_mx740c_firmware2.11.2 or later
- dell poweredge_mx840c_firmware2.11.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell poweredge_r640_firmware | v < 2.11.2 | 2.11.2 |
| dell poweredge_r740_firmware | v < 2.11.2 | 2.11.2 |
| dell poweredge_r740xd_firmware | v < 2.11.2 | 2.11.2 |
| dell poweredge_r940_firmware | v < 2.11.2 | 2.11.2 |
| dell poweredge_r840_firmware | v < 2.11.2 | 2.11.2 |
| dell poweredge_r940xa_firmware | v < 2.11.2 | 2.11.2 |
| dell poweredge_t640_firmware | v < 2.11.2 | 2.11.2 |
| dell poweredge_mx740c_firmware | v < 2.11.2 | 2.11.2 |
| dell poweredge_mx840c_firmware | v < 2.11.2 | 2.11.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.