CVE-2026-80357
HighCVSS 7.0Summary
Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to unauthorized access.
Risk Assessment
An attacker with physical access to the hardware can gain unauthorized access to the controller, potentially leading to system integrity compromise, data theft, or permanent hardware damage.
Recommendation
Update Dell BOSS firmware to version 2.2.13.2038 or later. Additionally, restrict physical access to servers and controllers.
Other vulnerabilities in Dell BOSS
See all- CVE-2026-80359Medium
Dell Boot Optimized Server Storage (BOSS) prior to version 2.2.13.2038 contains an improper access control vulnerability in the on-chip debug and test interface in SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could exploit this, leading to unauthorized access.
- CVE-2026-80358Medium
Dell Boot Optimized Server Storage (BOSS) prior to version 2.2.13.2038 contains an improper access control vulnerability in the on-chip debug and test interface in SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could exploit this, leading to unauthorized access.
Original NVD description (English source)
Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Unauthorized access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS