CVE-2023-44297

dell poweredge r660 firmware, dell poweredge r760 firmware, dell poweredge c6620 firmware +10 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-44297

Katalog CVE

CVSS 6.8 · Medium EPSS 0,25%

Kerentanan Hardware Internal or Debug Modes Allow Override of Locks pada dell poweredge r660 firmware, dell poweredge r760 firmware +11 lainnya. Skor CVSS 3.1 6.8 (Medium) menurut NVD.

Deskripsi (NVD)

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information disclosure, information tampering, code execution, denial of service.

Rincian

Terbit di NVD
5 Desember 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.8 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-1234: Hardware Internal or Debug Modes Allow Override of Locks
CWE-667: Improper Locking
EPSS (30 hari)
0,25% peluang dieksploitasi; lebih tinggi dari 15,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
dell poweredge r660 firmware Versi 1.4.4
dell poweredge r760 firmware Versi 1.4.4
dell poweredge c6620 firmware Versi 1.4.4
dell poweredge mx760c firmware Versi 1.4.4
dell poweredge r860 firmware Versi 1.4.4
dell poweredge r960 firmware Versi 1.4.4
dell poweredge hs5610 firmware Versi 1.4.4
dell poweredge hs5620 firmware Versi 1.4.4
dell poweredge r660xs firmware Versi 1.4.4
dell poweredge r760xs firmware Versi 1.4.4
dell poweredge r760xd2 firmware Versi 1.4.4
dell poweredge t560 firmware Versi 1.4.4
dell poweredge r760xa firmware Versi 1.4.4

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.