CVE-2023-44298

CVSS 3.1 Score 6.8 of 10 (medium)

Details

Published Dec 5, 2023
Updated: Dec 12, 2023
CWE ID 1234
CWE ID 667

Summary

CVE-2023-44298 is a security vulnerability found in Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4. This vulnerability allows an unauthenticated physical attacker to exploit active debug code, potentially leading to information tampering, code execution, and denial of service. The affected products include tw7VGE, tw7VGC, tw7VGA, tw7VFu, tw7VFs, tw7VF2, tw7VF0, tw7VFy, tw7VFw, tw7VF-, tw7VF8, tw7VF6, and tw7VF4. The base severity of this vulnerability is rated as MEDIUM with a base score of 6.8 according to [email protected]. No user interaction or privileges are required for exploitation. The impact score is 5.9 with high integrity and confidentiality impacts. The attack vector is physical access with low attack complexity and high availability impact.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-44298 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options