{"id":"CVE-2026-80358","title":"Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers","summary":"Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with ph…","severity":"medium","cvss":5.1,"cvssVector":"CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L","cwe":["CWE-1191"],"vendor":"Dell","product":"Boot Optimized Server Storage (BOSS)","affected":["boot_optimized_server_storage_boss < 2.2.13.2038"],"published":"2026-09-28","updated":"2026-09-28","sourceUpdated":"2026-09-28T15:17:23.887","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-80358","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000513073/dsa-2026-402-security-update-for-dell-boot-optimized-server-storage-boss-vulnerability","label":"security_alert@emc.com"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-28T15:13:31.606Z","slug":"CVE-2026-80358","body":"## Overview\n\nDell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Unauthorized access.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":28.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}