CVEvulnerability

CVE-2023-44298

6.8 MEDIUM Published 2023-12-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.6 LOW — CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1234, CWE-667

Description

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service.

Affected configurations

• dell poweredge r660 firmware 1.4.4 • dell poweredge r760 firmware 1.4.4 • dell poweredge c6620 firmware 1.4.4 • dell poweredge mx760c firmware 1.4.4 • dell poweredge r860 firmware 1.4.4 • dell poweredge r960 firmware 1.4.4 • dell poweredge hs5610 firmware 1.4.4 • dell poweredge hs5620 firmware 1.4.4 • dell poweredge r660xs firmware 1.4.4 • dell poweredge r760xs firmware 1.4.4 • dell poweredge r760xd2 firmware 1.4.4 • dell poweredge t560 firmware 1.4.4 • dell poweredge r760xa firmware 1.4.4

Related

Weakness · CWE (2)

  • CWE-1234 Hardware Internal or Debug Modes Allow Override of Locks weakness
  • CWE-667 Improper Locking weakness

References