Threat Investigation
Request a demo

CVE-2021-21557

High

Description

Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.

SeverityHigh
CVSS8.1
Exploit probability—
ProductDell Poweredge R640 Firmware
PublishedJun 14, 2021
First seenJun 14, 2021
Weakness typeCWE-20Improper input validation

How to fix

Update
  • dell poweredge_r640_firmware2.11.2 or later
  • dell poweredge_r740_firmware2.11.2 or later
  • dell poweredge_r740xd_firmware2.11.2 or later
  • dell poweredge_r940_firmware2.11.2 or later
  • dell poweredge_r540_firmware2.11.2 or later
  • dell poweredge_r440_firmware2.11.2 or later
  • dell poweredge_t440_firmware2.11.2 or later
  • dell poweredge_xr2_firmware2.11.2 or later
  • dell poweredge_r740xd2_firmware2.11.2 or later
  • dell poweredge_r840_firmware2.11.2 or later
  • dell poweredge_r940xa_firmware2.11.2 or later
  • dell poweredge_t640_firmware2.11.2 or later

Affected products

ProductAffected versionsFixed in
dell poweredge_r640_firmwarev < 2.11.22.11.2
dell poweredge_r740_firmwarev < 2.11.22.11.2
dell poweredge_r740xd_firmwarev < 2.11.22.11.2
dell poweredge_r940_firmwarev < 2.11.22.11.2
dell poweredge_r540_firmwarev < 2.11.22.11.2
dell poweredge_r440_firmwarev < 2.11.22.11.2
dell poweredge_t440_firmwarev < 2.11.22.11.2
dell poweredge_xr2_firmwarev < 2.11.22.11.2
dell poweredge_r740xd2_firmwarev < 2.11.22.11.2
dell poweredge_r840_firmwarev < 2.11.22.11.2
dell poweredge_r940xa_firmwarev < 2.11.22.11.2
dell poweredge_t640_firmwarev < 2.11.22.11.2
dell poweredge_c6420_firmwarev < 2.11.22.11.2
dell poweredge_fc640_firmwarev < 2.11.22.11.2
dell poweredge_m640_firmwarev < 2.11.22.11.2
dell poweredge_m640p_firmwarev < 2.11.22.11.2
dell poweredge_mx740c_firmwarev < 2.11.22.11.2
dell poweredge_mx840c_firmwarev < 2.11.22.11.2
dell poweredge_c4140_firmwarev < 2.11.22.11.2
dell poweredge_t140_firmwarev < 2.5.12.5.1
dell poweredge_t340_firmwarev < 2.5.12.5.1
dell poweredge_r240_firmwarev < 2.5.12.5.1
dell poweredge_r340_firmwarev < 2.5.12.5.1
dell poweredge_r6415_firmwarev < 1.16.11.16.1
dell poweredge_r7415_firmwarev < 1.16.11.16.1
dell poweredge_r7425_firmwarev < 1.16.11.16.1
dell poweredge_r6515_firmwarev < 2.2.42.2.4
dell poweredge_r7515_firmwarev < 2.2.42.2.4
dell poweredge_r6525_firmwarev < 2.2.52.2.5
dell poweredge_r7525_firmwarev < 2.2.52.2.5
dell poweredge_c6525_firmwarev < 2.2.42.2.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.