← Back

CVE-2023-44297

nvd nist
Published: Dec 5, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.8
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: NVD

Description

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information disclosure, information tampering, code execution, denial of service.

Affected (13)

Dell
13 products
Poweredge R660 Firmware
Poweredge R760 Firmware
Poweredge C6620 Firmware
Poweredge Mx760c Firmware
Poweredge R860 Firmware
Poweredge R960 Firmware
Poweredge Hs5610 Firmware
Poweredge Hs5620 Firmware
Poweredge R660xs Firmware
Poweredge R760xs Firmware
Poweredge R760xd2 Firmware
Poweredge T560 Firmware
Poweredge R760xa Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poweredge R660 Firmware
Version 1.4.4
Running on/withPlatform Versions
Dell
Poweredge R660
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poweredge R760 Firmware
Version 1.4.4
Running on/withPlatform Versions
Dell
Poweredge R760
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poweredge C6620 Firmware
Version 1.4.4
Running on/withPlatform Versions
Dell
Poweredge C6620
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poweredge Mx760c Firmware
Version 1.4.4
Running on/withPlatform Versions
Dell
Poweredge Mx760c
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poweredge R860 Firmware
Version 1.4.4
Running on/withPlatform Versions
Dell
Poweredge R860
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poweredge R960 Firmware
Version 1.4.4
Running on/withPlatform Versions
Dell
Poweredge R960
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poweredge Hs5610 Firmware
Version 1.4.4
Running on/withPlatform Versions
Dell
Poweredge Hs5610
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poweredge Hs5620 Firmware
Version 1.4.4
Running on/withPlatform Versions
Dell
Poweredge Hs5620
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poweredge R660xs Firmware
Version 1.4.4
Running on/withPlatform Versions
Dell
Poweredge R660xs
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poweredge R760xs Firmware
Version 1.4.4
Running on/withPlatform Versions
Dell
Poweredge R760xs
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poweredge R760xd2 Firmware
Version 1.4.4
Running on/withPlatform Versions
Dell
Poweredge R760xd2
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poweredge T560 Firmware
Version 1.4.4
Running on/withPlatform Versions
Dell
Poweredge T560
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Poweredge R760xa Firmware
Version 1.4.4
Running on/withPlatform Versions
Dell
Poweredge R760xa
All versions

Related CWEs

CWE-1234
Hardware Internal or Debug Modes Allow Override of Locks
System configuration protection may be bypassed during debug mode.
CWE-667
Improper Locking
The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

References (2)

Source: security_alert@emc.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.