Vulnerability in Dell Poweredge Bios
CVE-2023-44298
Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information…
EPSS: 0.002 (15.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 3.6 (Low). Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L.
Affected products
- Dell Poweredge Bios — versions Version 1.4.4
- Dell Poweredge_c6620
- Dell Poweredge_c6620_firmware — versions 1.4.4
- Dell Poweredge_hs5610
- Dell Poweredge_hs5610_firmware — versions 1.4.4
- Dell Poweredge_hs5620
- Dell Poweredge_hs5620_firmware — versions 1.4.4
- Dell Poweredge_mx760c
- Dell Poweredge_mx760c_firmware — versions 1.4.4
- Dell Poweredge_r660
Weakness classification (CWE)
References
- security_alert@emc.com (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-44298?
- CVE-2023-44298 is a low-severity vulnerability in Dell Poweredge Bios, classified under CWE-1234. CVSS score: 3.6/10. Published 2023-12-05.
- How severe is CVE-2023-44298?
- Low severity. CVSS v3 base score is 3.6 out of 10.