Vulnerability · Published Jun 14, 2021 · Assigned by dell

CVE-2021-21554

Medium 6.1

In plain English

A medium-severity heap buffer overflow in PowerEdge BIOS Intel 15G from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).

Severity (CVSS 3.1)6.1Medium

Exploit odds (30 days)0.3%top 73.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.

Affected products (as reported)

Vendor	Product	Versions
Dell	PowerEdge BIOS Intel 15G	unspecified – before 2.9.4

Weakness: CWE-122 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L

References

https://www.dell.com/support/kbdoc/000187958 x_refsource_MISC