CVE-2023-29061 | BDVDB-2026-217834 Detail
Becton, Dickinson and Company (BD)FACSChorus
Description#
There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication.
Impact#
CAPEC-122 Privilege Abuse
Weaknesses#
- CWE-306 Missing Authentication for Critical Function
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.