CVE-2023-44298: Medium severity dell poweredge r660xs firmware vulnerability

Published Dec 5, 2023
·
Updated

Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could potentially exploit this vulnerability, leading to information tampering, code execution, denial of service.

Affected Software

26 affected components
All of the following
Dell Poweredge R660 Firmware=1.4.4
Dell Poweredge R660
All of the following
Dell Poweredge R760 Firmware=1.4.4
Dell Poweredge R760
All of the following
Dell Poweredge C6620 Firmware=1.4.4
Dell Poweredge C6620
All of the following
Dell Poweredge Mx760c Firmware=1.4.4
Dell Poweredge Mx760c
All of the following
Dell Poweredge R860 Firmware=1.4.4
Dell Poweredge R860
All of the following
Dell Poweredge R960 Firmware=1.4.4
Dell Poweredge R960
All of the following
Dell Poweredge Hs5610 Firmware=1.4.4
Dell Poweredge Hs5610
All of the following
Dell Poweredge Hs5620 Firmware=1.4.4
Dell Poweredge Hs5620
All of the following
Dell Poweredge R660xs Firmware=1.4.4
Dell Poweredge R660xs
All of the following
Dell Poweredge R760xs Firmware=1.4.4
Dell Poweredge R760xs
All of the following
Dell Poweredge R760xd2 Firmware=1.4.4
Dell Poweredge R760xd2
All of the following
Dell Poweredge T560 Firmware=1.4.4
Dell Poweredge T560
All of the following
Dell Poweredge R760xa Firmware=1.4.4
Dell Poweredge R760xa

Event History

Dec 5, 2023
CVE Published
03:57 PM
Data Sourced
03:57 PM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-44298?

The severity of CVE-2023-44298 is considered high due to potential exploitation by an unauthenticated attacker.

2

How do I fix CVE-2023-44298?

To fix CVE-2023-44298, update the affected Dell PowerEdge firmware to the latest version available from Dell.

3

Which systems are affected by CVE-2023-44298?

CVE-2023-44298 affects various Dell PowerEdge platforms with BIOS version 1.4.4.

4

What types of attacks could exploit CVE-2023-44298?

CVE-2023-44298 could be exploited to perform information tampering, code execution, or denial of service attacks.

5

Is remote access required to exploit CVE-2023-44298?

Remote access is not required to exploit CVE-2023-44298, as it can be exploited by an unauthenticated physical attacker.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203