Lucene search

DellCVELIST:CVE-2021-21554

HistoryJun 14, 2021 - 7:10 p.m.

CVE-2021-21554

2021-06-1419:10:14

CWE-122

dell

www.cve.org

dell poweredge

bios

buffer overflow

intel optane

uefi

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L

AI Score

7.1

Confidence

High

EPSS

Percentile

12.6%

JSON

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.

CNA Affected

[
  {
    "product": "PowerEdge BIOS Intel 15G",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "2.9.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/000187958

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L

AI Score

7.1

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2021-21554