{"id":"CVE-2023-44297","aliases":["EUVD-2023-48653","GHSA-p823-qqjj-g5w7"],"status":"published","title":"Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain...","description":"Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information disclosure, information tampering, code execution, denial of service.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00253,"percentile":0.17025,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1234","CWE-667"],"published":"2023-12-05T15:52:27Z","modified":"2026-06-17T06:27:19Z","products":[{"vendor":"dell","product":"poweredge bios"},{"vendor":"dell","product":"poweredge_c6620_firmware"},{"vendor":"dell","product":"poweredge_hs5610_firmware"},{"vendor":"dell","product":"poweredge_hs5620_firmware"},{"vendor":"dell","product":"poweredge_mx760c_firmware"},{"vendor":"dell","product":"poweredge_r660_firmware"},{"vendor":"dell","product":"poweredge_r660xs_firmware"},{"vendor":"dell","product":"poweredge_r760_firmware"},{"vendor":"dell","product":"poweredge_r760xa_firmware"},{"vendor":"dell","product":"poweredge_r760xd2_firmware"},{"vendor":"dell","product":"poweredge_r760xs_firmware"},{"vendor":"dell","product":"poweredge_r860_firmware"},{"vendor":"dell","product":"poweredge_r960_firmware"},{"vendor":"dell","product":"poweredge_t560_firmware"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000220047/dsa-2023-429-security-update-for-dell-16g-poweredge-server-bios-for-a-debug-code-security-vulnerability","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-44297"},{"url":"https://github.com/advisories/GHSA-p823-qqjj-g5w7"}],"sources":{"cve":[{"id":"CVE-2023-44297","description":"\nDell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information disclosure, information tampering, code execution, denial of service.\n\n","status":"published","published":"2023-12-05T15:52:27.262Z","modified":"2024-08-02T19:59:52.069Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-1234"],"updated_at":"2026-11-02T14:35:21.612665Z"}],"euvd":[{"id":"EUVD-2023-48653","description":"\nDell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information disclosure, information tampering, code execution, denial of service.\n\n","status":"published","published":"2023-12-05T15:52:27Z","modified":"2024-08-02T19:59:52Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-03T03:49:59.530903Z"}],"ghsa":[{"id":"GHSA-p823-qqjj-g5w7","title":"\nDell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain...","description":"\nDell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information disclosure, information tampering, code execution, denial of service.\n\n","status":"published","published":"2023-12-05T18:30:23Z","modified":"2023-12-20T05:06:25Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high"}],"cwes":["CWE-667","CWE-1234"],"updated_at":"2026-11-02T14:55:15.236949Z"}],"nvd":[{"id":"CVE-2023-44297","description":"\nDell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information disclosure, information tampering, code execution, denial of service.\n\n","status":"published","published":"2023-12-05T16:15:07.097Z","modified":"2026-06-17T06:27:19.113Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","level":"high","assessor":"secondary"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-1234","CWE-667"],"updated_at":"2026-11-02T14:08:54.010507Z"}]}}