CVSS 3.1
6.8 mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-44298
Medium (6.8) in dell. EPSS 0.2% chance of exploitation in the next 30 days.
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-667, CWE-1234
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:poweredge_c6620_firmware
- dell:poweredge_hs5610_firmware
- dell:poweredge_hs5620_firmware
- dell:poweredge_mx760c_firmware
- dell:poweredge_r660_firmware
- dell:poweredge_r660xs_firmware
- dell:poweredge_r760_firmware
- dell:poweredge_r760xa_firmware
- dell:poweredge_r760xd2_firmware
- dell:poweredge_r760xs_firmware
- dell:poweredge_r860_firmware
- dell:poweredge_r960_firmware
- dell:poweredge_t560_firmware
References
- https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability