Stack-based Buffer Overflow in Dell PowerEdge Servers

CVE-2021-21556

What is CVE-2021-21556?

The Dell PowerEdge Server series, including models R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640, contains a vulnerability in their BIOS firmware stemming from a stack-based buffer overflow related to NVDIMM-N installations. This flaw can be exploited by a local user with high privileges, potentially leading to a denial of service, arbitrary code execution, or unauthorized access to sensitive information within the UEFI or BIOS Preboot Environment. Organizations should take immediate action to mitigate risks associated with this vulnerability.

References