All vulnerabilities
CVE-2026-80357

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers

Dell Boot Optimized Server Storage (BOSS)
Open in ThreatlineRecord JSON
CVSS
7.0High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.11%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in2.2.13.2038Fixed versionCVE List
Published28 Sep 2026Updated 28 Sep 2026CVE List

What fixes it

  • 2.2.13.2038Boot Optimized Server Storage (BOSS)CVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control vulnerability in the SMCU on 17G BOSS-N1 controllers. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Unauthorized access.

Text from CVE List

Affected versions 1

  • Boot Optimized Server Storage (BOSS)affected: all versions before 2.2.13.2038CVE List

References 1