1. Home
  2. CVE Database
  3. CVE-2023-29065
MEDIUM · 4.1

CVE-2023-29065

The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat actor with physical access could potentially gain credentials, which could be us...

Vulnerability Description

The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat actor with physical access could potentially gain credentials, which could be used to alter or destroy data stored in the database.

CVSS Score

4.1

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
BdFacschorus5.0
HpHp Z2 Tower G9-
HpHp Z2 Tower G5-

Related Weaknesses (CWE)

CWE-277CWE-732

References

FAQ

What is CVE-2023-29065?

CVE-2023-29065 is a vulnerability with a CVSS score of 4.1 (MEDIUM). The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat actor with physical access could potentially gain credentials, which could be us...

How severe is CVE-2023-29065?

CVE-2023-29065 has been rated MEDIUM with a CVSS base score of 4.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-29065?

Check the references section above for vendor advisories and patch information. Affected products include: Bd Facschorus, Hp Hp Z2 Tower G9, Hp Hp Z2 Tower G5.