CVE-2021-21557

Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.

• dell poweredge r640 firmware (< 2.11.2) • dell poweredge r740 firmware (< 2.11.2) • dell poweredge r740xd firmware (< 2.11.2) • dell poweredge r940 firmware (< 2.11.2) • dell poweredge r540 firmware (< 2.11.2) • dell poweredge r440 firmware (< 2.11.2) • dell poweredge t440 firmware (< 2.11.2) • dell poweredge xr2 firmware (< 2.11.2) • dell poweredge r740xd2 firmware (< 2.11.2) • dell poweredge r840 firmware (< 2.11.2) • dell poweredge r940xa firmware (< 2.11.2) • dell poweredge t640 firmware (< 2.11.2) • dell poweredge c6420 firmware (< 2.11.2) • dell poweredge fc640 firmware (< 2.11.2) • dell poweredge m640 firmware (< 2.11.2) • dell poweredge m640p firmware (< 2.11.2) • dell poweredge mx740c firmware (< 2.11.2) • dell poweredge mx840c firmware (< 2.11.2) • dell poweredge c4140 firmware (< 2.11.2) • dell poweredge t140 firmware (< 2.5.1) • dell poweredge t340 firmware (< 2.5.1) • dell poweredge r240 firmware (< 2.5.1) • dell poweredge r340 firmware (< 2.5.1) • dell poweredge r6415 firmware (< 1.16.1) • dell poweredge r7415 firmware (< 1.16.1) • dell poweredge r7425 firmware (< 1.16.1) • dell poweredge r6515 firmware (< 2.2.4) • dell poweredge r7515 firmware (< 2.2.4) • dell poweredge r6525 firmware (< 2.2.5) • dell poweredge r7525 firmware (< 2.2.5) • dell poweredge c6525 firmware (< 2.2.4)