CVE-2021-21557
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array...
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.
- Record
CVE-2021-21557- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2021-8829
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.
- Record
EUVD-2021-8829- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-66g6-48gr-pwpc
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array...
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.
- Record
GHSA-66g6-48gr-pwpc- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119, CWE-125
- Updated
- 2026-11-02
NVD
Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.
- Record
CVE-2021-21557- CVSS 3.1
- 8.1 High
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-20, CWE-125
- Updated
- 2026-11-02
Affected products
- dell poweredge bios intel 15g
- dell poweredge c4140 firmware
- dell poweredge c6420 firmware
- dell poweredge c6525 firmware
- dell poweredge fc640 firmware
- dell poweredge m640 firmware
- dell poweredge m640p firmware
- dell poweredge mx740c firmware
- dell poweredge mx840c firmware
- dell poweredge r240 firmware
- dell poweredge r340 firmware
- dell poweredge r440 firmware
Show 20 moreShow less
- dell poweredge r540 firmware
- dell poweredge r640 firmware
- dell poweredge r6415 firmware
- dell poweredge r6515 firmware
- dell poweredge r6525 firmware
- dell poweredge r740 firmware
- dell poweredge r740xd2 firmware
- dell poweredge r740xd firmware
- dell poweredge r7415 firmware
- dell poweredge r7425 firmware
- dell poweredge r7515 firmware
- dell poweredge r7525 firmware
- dell poweredge r840 firmware
- dell poweredge r940 firmware
- dell poweredge r940xa firmware
- dell poweredge t140 firmware
- dell poweredge t340 firmware
- dell poweredge t440 firmware
- dell poweredge t640 firmware
- dell poweredge xr2 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-21557 is a high vulnerability (CVSS 8.1) in Dell Poweredge Bios Intel 15g, published June 14, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. No source names a fixed version.