CVE-2021-21555: Dell Poweredge MX740C Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.

Affected products

• Dell Poweredge MX740C Firmware: before 2.11.2 (fixed in 2.11.2)
• Dell Poweredge MX840C Firmware: before 2.11.2 (fixed in 2.11.2)
• Dell Poweredge r640 Firmware: before 2.11.2 (fixed in 2.11.2)
• Dell Poweredge r740 Firmware: before 2.11.2 (fixed in 2.11.2)
• Dell Poweredge r740xd Firmware: before 2.11.2 (fixed in 2.11.2)
• Dell Poweredge r840 Firmware: before 2.11.2 (fixed in 2.11.2)
• Dell Poweredge r940 Firmware: before 2.11.2 (fixed in 2.11.2)
• Dell Poweredge r940xa Firmware: before 2.11.2 (fixed in 2.11.2)
• Dell Poweredge t640 Firmware: before 2.11.2 (fixed in 2.11.2)

Published 2021-06-14. Last modified 2026-06-17.