Vulnerability · Published Jun 14, 2021 · Assigned by dell

CVE-2021-21555

Medium 6.1

In plain English

A medium-severity heap buffer overflow in PowerEdge BIOS Intel 15G from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).

Severity (CVSS 3.1)6.1Medium

Exploit odds (30 days)0.3%top 75.6% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.

Affected products (as reported)

Vendor	Product	Versions
Dell	PowerEdge BIOS Intel 15G	unspecified – before 2.11.2

Weakness: CWE-122 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L

References

https://www.dell.com/support/kbdoc/000187958 x_refsource_MISC