CVE-2023-44298
CVSS 3.1 Score 6.8 of 10 (medium)
Details
Summary
CVE-2023-44298 is a security vulnerability found in Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4. This vulnerability allows an unauthenticated physical attacker to exploit active debug code, potentially leading to information tampering, code execution, and denial of service. The affected products include tw7VGE, tw7VGC, tw7VGA, tw7VFu, tw7VFs, tw7VF2, tw7VF0, tw7VFy, tw7VFw, tw7VF-, tw7VF8, tw7VF6, and tw7VF4. The base severity of this vulnerability is rated as MEDIUM with a base score of 6.8 according to [email protected]. No user interaction or privileges are required for exploitation. The impact score is 5.9 with high integrity and confidentiality impacts. The attack vector is physical access with low attack complexity and high availability impact.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions