CVE-2021-21557: Dell Poweredge c4140 Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.

Affected products

  • Dell Poweredge c4140 Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge c6420 Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge c6525 Firmware: before 2.2.4 (fixed in 2.2.4)
  • Dell Poweredge FC640 Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge m640 Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge m640p Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge MX740C Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge MX840C Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge r240 Firmware: before 2.5.1 (fixed in 2.5.1)
  • Dell Poweredge r340 Firmware: before 2.5.1 (fixed in 2.5.1)
  • Dell Poweredge r440 Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge r540 Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge r640 Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge r6415 Firmware: before 1.16.1 (fixed in 1.16.1)
  • Dell Poweredge r6515 Firmware: before 2.2.4 (fixed in 2.2.4)
  • Dell Poweredge r6525 Firmware: before 2.2.5 (fixed in 2.2.5)
  • Dell Poweredge r740 Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge r740xd2 Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge r740xd Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge r7415 Firmware: before 1.16.1 (fixed in 1.16.1)
  • Dell Poweredge r7425 Firmware: before 1.16.1 (fixed in 1.16.1)
  • Dell Poweredge r7515 Firmware: before 2.2.4 (fixed in 2.2.4)
  • Dell Poweredge r7525 Firmware: before 2.2.5 (fixed in 2.2.5)
  • Dell Poweredge r840 Firmware: before 2.11.2 (fixed in 2.11.2)
  • Dell Poweredge r940 Firmware: before 2.11.2 (fixed in 2.11.2)
  • and 6 more

Published 2021-06-14. Last modified 2026-06-17.