CVSS 3.1
6.7 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2021-21557
Medium (6.7) in dell. EPSS 0.3% chance of exploitation in the next 30 days.
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-125, CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:poweredge_c4140_firmware
- dell:poweredge_c6420_firmware
- dell:poweredge_c6525_firmware
- dell:poweredge_fc640_firmware
- dell:poweredge_m640_firmware
- dell:poweredge_m640p_firmware
- dell:poweredge_mx740c_firmware
- dell:poweredge_mx840c_firmware
- dell:poweredge_r240_firmware
- dell:poweredge_r340_firmware
- dell:poweredge_r440_firmware
- dell:poweredge_r540_firmware
- dell:poweredge_r640_firmware
- dell:poweredge_r6415_firmware
- dell:poweredge_r6515_firmware
- dell:poweredge_r6525_firmware
- dell:poweredge_r740_firmware
- dell:poweredge_r740xd2_firmware
- dell:poweredge_r740xd_firmware
- dell:poweredge_r7415_firmware
- dell:poweredge_r7425_firmware
- dell:poweredge_r7515_firmware
- dell:poweredge_r7525_firmware
- dell:poweredge_r840_firmware
- dell:poweredge_r940_firmware
- dell:poweredge_r940xa_firmware
- dell:poweredge_t140_firmware
- dell:poweredge_t340_firmware
- dell:poweredge_t440_firmware
- dell:poweredge_t640_firmware
- dell:poweredge_xr2_firmware