CVE-2023-44298: dell poweredge r660 firmware +12 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2023-44298

CVSS 6.8 · Medium EPSS 0,24%

Kerentanan Hardware Internal or Debug Modes Allow Override of Locks pada dell poweredge r660 firmware, dell poweredge r760 firmware +11 lainnya. Skor CVSS 3.1 6.8 (Medium) menurut NVD.

Deskripsi (NVD)

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service.

Rincian

Terbit di NVD: 5 Desember 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.8 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-1234: Hardware Internal or Debug Modes Allow Override of Locks
CWE-667: Improper Locking
EPSS (30 hari): 0,24% peluang dieksploitasi; lebih tinggi dari 14,4% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
dell	poweredge r660 firmware	Versi 1.4.4
dell	poweredge r760 firmware	Versi 1.4.4
dell	poweredge c6620 firmware	Versi 1.4.4
dell	poweredge mx760c firmware	Versi 1.4.4
dell	poweredge r860 firmware	Versi 1.4.4
dell	poweredge r960 firmware	Versi 1.4.4
dell	poweredge hs5610 firmware	Versi 1.4.4
dell	poweredge hs5620 firmware	Versi 1.4.4
dell	poweredge r660xs firmware	Versi 1.4.4
dell	poweredge r760xs firmware	Versi 1.4.4
dell	poweredge r760xd2 firmware	Versi 1.4.4
dell	poweredge t560 firmware	Versi 1.4.4
dell	poweredge r760xa firmware	Versi 1.4.4

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-... advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.