Login Request a demo
Medium severity · published Dec 5, 2023
CVE-2023-44297
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability
6.8
CVSS
0.3%
EPSS
No
On KEV
Description
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information disclosure, information tampering, code execution, denial of service.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PB
PowerEdge BIOS · Dell
Version 1.4.4 · source: vendor
PC
Poweredge C6620 Firmware · Dell
1.4.4 · source: NVD
PH
Poweredge Hs5610 Firmware · Dell
1.4.4 · source: NVD
PH
Poweredge Hs5620 Firmware · Dell
1.4.4 · source: NVD
PM
Poweredge Mx760c Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R660 Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R660xs Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R760 Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R760xa Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R760xd2 Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R760xs Firmware · Dell
1.4.4 · source: NVD
PR
Poweredge R860 Firmware · Dell
1.4.4 · source: NVD
Affected product
PB
PowerEdge BIOS
Dell
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-44297
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-44297
Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability
More from PowerEdge BIOS
6.8
CVE-2023-44298
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability