low3.6
CVE-2023-44298
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability.
Impact
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Poweredge R660 Firmware | Version 1.4.4 |
| Dell | Poweredge R760 Firmware | Version 1.4.4 |
| Dell | Poweredge C6620 Firmware | Version 1.4.4 |
| Dell | Poweredge Mx760c Firmware | Version 1.4.4 |
| Dell | Poweredge R860 Firmware | Version 1.4.4 |
| Dell | Poweredge R960 Firmware | Version 1.4.4 |
| Dell | Poweredge Hs5610 Firmware | Version 1.4.4 |
| Dell | Poweredge Hs5620 Firmware | Version 1.4.4 |
| Dell | Poweredge R660xs Firmware | Version 1.4.4 |
| Dell | Poweredge R760xs Firmware | Version 1.4.4 |
| Dell | Poweredge R760xd2 Firmware | Version 1.4.4 |
| Dell | Poweredge T560 Firmware | Version 1.4.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability
- https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability