CVE-2023-44298

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-12-05 · updated 2026-06-17
Weakness: CWE-1234

Description

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service.

Affected products

Dell Poweredge C6620 Firmware: 1.4.4
Dell Poweredge Hs5610 Firmware: 1.4.4
Dell Poweredge Hs5620 Firmware: 1.4.4
Dell Poweredge Mx760C Firmware: 1.4.4
Dell Poweredge R660 Firmware: 1.4.4
Dell Poweredge R660Xs Firmware: 1.4.4
Dell Poweredge R760 Firmware: 1.4.4
Dell Poweredge R760Xa Firmware: 1.4.4
Dell Poweredge R760Xd2 Firmware: 1.4.4
Dell Poweredge R760Xs Firmware: 1.4.4
Dell Poweredge R860 Firmware: 1.4.4
Dell Poweredge R960 Firmware: 1.4.4
Dell Poweredge T560 Firmware: 1.4.4

References

https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability
https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability

Get alerted when CVE-2023-44298 or the next vulnerability affects your stack