CVE-2021-21554

dell poweredge r640 firmware, dell poweredge r740 firmware, dell poweredge r740xd firmware +6 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-21554

Katalog CVE

CVSS 6.7 · Medium EPSS 0,34%

Kerentanan Heap-based Buffer Overflow pada dell poweredge r640 firmware, dell poweredge r740 firmware +7 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.

Rincian

Terbit di NVD
14 Juni 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-122: Heap-based Buffer Overflow
CWE-787: Out-of-bounds Write
EPSS (30 hari)
0,34% peluang dieksploitasi; lebih tinggi dari 25,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
dell poweredge r640 firmware Semua versi sebelum 2.9.4
dell poweredge r740 firmware Semua versi sebelum 2.9.4
dell poweredge r740xd firmware Semua versi sebelum 2.9.4
dell poweredge r940 firmware Semua versi sebelum 2.9.4
dell poweredge r840 firmware Semua versi sebelum 2.9.4
dell poweredge r940xa firmware Semua versi sebelum 2.9.4
dell poweredge mx740c firmware Semua versi sebelum 2.9.4
dell poweredge mx840c firmware Semua versi sebelum 2.9.4
dell precision 7920 firmware Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.