CVE-2023-29063
CVSS 3.1 Score 2.4 of 10 (low)
Details
Summary
CVE-2023-29063: This vulnerability affects the FACSChorus workstation, which fails to secure its PCIe slots against physical access. An attacker with unauthorized access to the workstation can install a PCI card designed for memory capture. During system startup, sensitive information such as BitLocker encryption keys can be isolated from a dump of the workstation's RAM. This issue poses a significant risk to data security and should be addressed promptly. It is recommended that organizations implement physical security measures, such as locking PCIe slot covers, to mitigate this vulnerability. Additionally, administrators should regularly update their workstations to ensure the latest security patches are applied.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Becton Dickinson
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions