CVE-2023-44298

Published: Dec 5, 2023Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service.

Affected (13)

Products: Dell: Poweredge R660 Firmware, Poweredge R760 Firmware, Poweredge C6620 Firmware, Poweredge Mx760c Firmware, Poweredge R860 Firmware, Poweredge R960 Firmware, Poweredge Hs5610 Firmware, Poweredge Hs5620 Firmware, Poweredge R660xs Firmware, Poweredge R760xs Firmware, Poweredge R760xd2 Firmware, Poweredge T560 Firmware, Poweredge R760xa Firmware

Dell

13 products

Poweredge R660 Firmware

Poweredge R760 Firmware

Poweredge C6620 Firmware

Poweredge Mx760c Firmware

Poweredge R860 Firmware

Poweredge R960 Firmware

Poweredge Hs5610 Firmware

Poweredge Hs5620 Firmware

Poweredge R660xs Firmware

Poweredge R760xs Firmware

Poweredge R760xd2 Firmware

Poweredge T560 Firmware

Poweredge R760xa Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R660 Firmware	Version 1.4.4

Running on/with	Platform Versions
Dell Poweredge R660	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R760 Firmware	Version 1.4.4

Running on/with	Platform Versions
Dell Poweredge R760	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge C6620 Firmware	Version 1.4.4

Running on/with	Platform Versions
Dell Poweredge C6620	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Mx760c Firmware	Version 1.4.4

Running on/with	Platform Versions
Dell Poweredge Mx760c	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R860 Firmware	Version 1.4.4

Running on/with	Platform Versions
Dell Poweredge R860	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R960 Firmware	Version 1.4.4

Running on/with	Platform Versions
Dell Poweredge R960	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Hs5610 Firmware	Version 1.4.4

Running on/with	Platform Versions
Dell Poweredge Hs5610	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Hs5620 Firmware	Version 1.4.4

Running on/with	Platform Versions
Dell Poweredge Hs5620	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R660xs Firmware	Version 1.4.4

Running on/with	Platform Versions
Dell Poweredge R660xs	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R760xs Firmware	Version 1.4.4

Running on/with	Platform Versions
Dell Poweredge R760xs	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R760xd2 Firmware	Version 1.4.4

Running on/with	Platform Versions
Dell Poweredge R760xd2	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T560 Firmware	Version 1.4.4

Running on/with	Platform Versions
Dell Poweredge T560	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R760xa Firmware	Version 1.4.4

Running on/with	Platform Versions
Dell Poweredge R760xa	All versions

Related CWEs

CWE-1234

Hardware Internal or Debug Modes Allow Override of Locks

System configuration protection may be bypassed during debug mode.

CWE-667

Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

References (2)

https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.