8.1
High
CVE-2021-21557 Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability
Description
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerEdge BIOS Intel 15G 2.11 | earliest → < 2.11.2 | 2.11.2 |
Other CVEs of PowerEdge BIOS Intel 15G
The 4 CVEs of PowerEdge BIOS Intel 15G →
CVE-2021-21556
Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a stack-based buffer…
6.1
Medium
CVE-2021-21555
Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based…
6.1
Medium
CVE-2021-21554
Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS…
6.1
Medium