Login Request a demo
Medium severity · published Dec 5, 2023
CVE-2023-44298
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability
6.8
CVSS
0.2%
EPSS
No
On KEV
Description
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PC
Poweredge C6620 Firmware · Dell
1.4.4 · source: NVD
PH
Poweredge Hs5610 Firmware · Dell
1.4.4 · source: NVD
PH
Poweredge Hs5620 Firmware · Dell
1.4.4 · source: NVD
PM
Poweredge Mx760c Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R660 Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R660xs Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R760 Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R760xa Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R760xd2 Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R760xs Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R860 Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R960 Firmware · Dell
1.4.4 · source: NVD
Affected product
PC
Poweredge C6620 Firmware
Dell
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-44298
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-44298
Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability
More from Poweredge C6620 Firmware
8.8
CVE-2024-0162
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability
7.8
CVE-2024-0172
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability
7.8
CVE-2023-32460
Dell PowerEdge BIOS contains an improper privilege management security vulnerability
6.8
CVE-2023-44297
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability
6.7
CVE-2023-32461
Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability