Vulnerability Description
The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then isolate sensitive information such as a BitLocker encryption key from a dump of the workstation RAM during startup.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bd | Facschorus | 5.0 |
| Hp | Hp Z2 Tower G9 | - |
| Hp | Hp Z2 Tower G5 | - |
Related Weaknesses (CWE)
References
- https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-softwareVendor Advisory
- https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-facschorus-softwareVendor Advisory
FAQ
What is CVE-2023-29063?
CVE-2023-29063 is a vulnerability with a CVSS score of 2.4 (LOW). The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then ...
How severe is CVE-2023-29063?
CVE-2023-29063 has been rated LOW with a CVSS base score of 2.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-29063?
Check the references section above for vendor advisories and patch information. Affected products include: Bd Facschorus, Hp Hp Z2 Tower G9, Hp Hp Z2 Tower G5.