CVE-2021-21557
—CVSS 3.1
6.7 medium
EPSS
<1%p28
Published
()
Modified
Description
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.
- Vendors
- dell
- Products
- poweredge r640 firmware, poweredge r740 firmware, poweredge r740xd firmware, poweredge r940 firmware, poweredge r540 firmware, poweredge r440 firmware, poweredge t440 firmware, poweredge xr2 firmware, poweredge r740xd2 firmware, poweredge r840 firmware, poweredge r940xa firmware, poweredge t640 firmware
- Weakness
- CWE-20, CWE-125
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.