CVE-2026-80358
MediumCVSS 5.1Summary
Dell Boot Optimized Server Storage (BOSS) prior to version 2.2.13.2038 contains an improper access control vulnerability in the on-chip debug and test interface in SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could exploit this, leading to unauthorized access.
Risk Assessment
Risk of unauthorized access to the system by someone with physical access to the hardware, potentially compromising data confidentiality and integrity.
Recommendation
Update BOSS firmware to version 2.2.13.2038 or later and restrict physical access to servers.
Other vulnerabilities in Dell BOSS
See all- CVE-2026-80359Medium
Dell Boot Optimized Server Storage (BOSS) prior to version 2.2.13.2038 contains an improper access control vulnerability in the on-chip debug and test interface in SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could exploit this, leading to unauthorized access.
- CVE-2026-80357High
Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to unauthorized access.
Original NVD description (English source)
Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Unauthorized access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS