CVE-2023-44298

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-44298
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service.

3.6 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 0.5 / Impact : 2.7

Attack Vector PHYSICAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dell:poweredge_r660_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r660:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dell:poweredge_r760_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r760:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dell:poweredge_c6620_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_c6620:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:dell:poweredge_mx760c_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_mx760c:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:dell:poweredge_r860_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r860:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:dell:poweredge_r960_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r960:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:dell:poweredge_hs5610_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_hs5610:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:dell:poweredge_hs5620_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_hs5620:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:dell:poweredge_r660xs_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r660xs:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:dell:poweredge_r760xs_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r760xs:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:dell:poweredge_r760xd2_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r760xd2:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:dell:poweredge_t560_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_t560:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:dell:poweredge_r760xa_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r760xa:-:*:*:*:*:*:*:*
History

21 Nov 2024, 08:25

Type Values Removed Values Added
References () https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability - Vendor Advisory () https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability - Vendor Advisory
CVSS v2 : unknown
v3 : 6.8 		v2 : unknown
v3 : 3.6

12 Dec 2023, 00:54

Type Values Removed Values Added
References () https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability - () https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability - Vendor Advisory
First Time Dell poweredge R760xa Firmware
Dell poweredge C6620
Dell poweredge T560
Dell poweredge R860
Dell poweredge R760xd2 Firmware
Dell poweredge R660 Firmware
Dell poweredge R760xs
Dell poweredge T560 Firmware
Dell poweredge Hs5620
Dell poweredge Hs5620 Firmware
Dell poweredge R760xa
Dell poweredge R760
Dell poweredge Hs5610 Firmware
Dell poweredge Hs5610
Dell poweredge R660xs
Dell poweredge Mx760c Firmware
Dell poweredge Mx760c
Dell poweredge R760xd2
Dell
Dell poweredge R760xs Firmware
Dell poweredge R660xs Firmware
Dell poweredge C6620 Firmware
Dell poweredge R660
Dell poweredge R960 Firmware
Dell poweredge R760 Firmware
Dell poweredge R960
Dell poweredge R860 Firmware
CWE CWE-667
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.8
CPE cpe:2.3:h:dell:poweredge_r760xd2:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:poweredge_r660_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:o:dell:poweredge_r860_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r860:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_hs5610:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:poweredge_mx760c_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r660:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r760:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:poweredge_t560_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:o:dell:poweredge_r760xd2_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:o:dell:poweredge_hs5620_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_t560:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:poweredge_r660xs_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_mx760c:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:poweredge_c6620_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r760xs:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:poweredge_r760xa_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:o:dell:poweredge_r760xs_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_c6620:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r760xa:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:poweredge_r760_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:o:dell:poweredge_hs5610_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r660xs:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_r960:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:poweredge_r960_firmware:1.4.4:*:*:*:*:*:*:*
cpe:2.3:h:dell:poweredge_hs5620:-:*:*:*:*:*:*:*

05 Dec 2023, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-12-05 16:15

Updated : 2024-11-21 08:25

NVD link : CVE-2023-44298

Mitre link : CVE-2023-44298

CVE.ORG link : CVE-2023-44298

JSON object : View

Products Affected

dell

  • poweredge_t560_firmware
  • poweredge_r760_firmware
  • poweredge_r760xd2_firmware
  • poweredge_r660_firmware
  • poweredge_c6620
  • poweredge_hs5620
  • poweredge_hs5610
  • poweredge_t560
  • poweredge_c6620_firmware
  • poweredge_hs5620_firmware
  • poweredge_mx760c_firmware
  • poweredge_r760
  • poweredge_r660xs
  • poweredge_mx760c
  • poweredge_r860
  • poweredge_r760xa_firmware
  • poweredge_r660xs_firmware
  • poweredge_r760xa
  • poweredge_r760xd2
  • poweredge_r960
  • poweredge_hs5610_firmware
  • poweredge_r860_firmware
  • poweredge_r760xs_firmware
  • poweredge_r660
  • poweredge_r760xs
  • poweredge_r960_firmware
CWE
CWE-1234

Hardware Internal or Debug Modes Allow Override of Locks

CWE-667

Improper Locking