CVSS 3.1
6.8 mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-44297
Medium (6.8) in dell. EPSS 0.3% chance of exploitation in the next 30 days.
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information disclosure, information tampering, code execution, denial of service.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-667, CWE-1234
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:poweredge_c6620_firmware
- dell:poweredge_hs5610_firmware
- dell:poweredge_hs5620_firmware
- dell:poweredge_mx760c_firmware
- dell:poweredge_r660_firmware
- dell:poweredge_r660xs_firmware
- dell:poweredge_r760_firmware
- dell:poweredge_r760xa_firmware
- dell:poweredge_r760xd2_firmware
- dell:poweredge_r760xs_firmware
- dell:poweredge_r860_firmware
- dell:poweredge_r960_firmware
- dell:poweredge_t560_firmware
References
- https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability