Stack-Based Buffer Overflow in Dell PowerEdge and Precision Systems with Intel Optane

CVE-2021-21554

What is CVE-2021-21554?

A stack-based buffer overflow vulnerability exists in the BIOS of multiple Dell PowerEdge and Precision systems that use Intel Optane DC Persistent Memory. This vulnerability can be exploited by a local malicious user with elevated privileges, which may result in unauthorized access to sensitive information, denial of service, or arbitrary code execution within the UEFI or BIOS Preboot Environment. Organizations using the affected systems should implement necessary security measures to safeguard against potential exploitation.

References