CVE-2026-80357

Published: Sep 28, 2026Modified: Sep 28, 2026

7.0

Vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Exploitability: 0.4 / Impact: 6.0

Source: security_alert@emc.com (Secondary)

Description

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Unauthorized access.

Related CWEs

CWE-1191

On-Chip Debug and Test Interface With Improper Access Control

The chip does not implement or does not correctly perform access control to check whether users are authorized to access internal registers and test modes through the physical debug/test interface.

References (1)

https://www.dell.com/support/kbdoc/en-us/000513073/dsa-2026-402-security-update-for-dell-boot-optimized-server-storage-boss-vulnerability

Source: security_alert@emc.com

Timeline

No history available yet.