PT-2021-14604
CVE-2021-21556
·
Published
2021-06-14
·
Updated
2021-06-23
Description by
CVSS 2.0
7.2
HighMetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS (affected versions not specified)
Description
A stack-based buffer overflow vulnerability exists in systems with NVDIMM-N installed, which can be exploited by a local malicious user with high privileges. This could lead to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾