CVE-2023-29063

Summary

CVE-2023-29063: This vulnerability affects the FACSChorus workstation, which fails to secure its PCIe slots against physical access. An attacker with unauthorized access to the workstation can install a PCI card designed for memory capture. During system startup, sensitive information such as BitLocker encryption keys can be isolated from a dump of the workstation's RAM. This issue poses a significant risk to data security and should be addressed promptly. It is recommended that organizations implement physical security measures, such as locking PCIe slot covers, to mitigate this vulnerability. Additionally, administrators should regularly update their workstations to ensure the latest security patches are applied.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.