CVE-2023-29063 | BDVDB-2026-217836 Detail
Becton, Dickinson and Company (BD)FACSChorus
Description#
The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then isolate sensitive information such as a BitLocker encryption key from a dump of the workstation RAM during startup.
Impact#
CAPEC-121 Exploit Non-Production Interfaces
Weaknesses#
- CWE-1299 Missing Protection Mechanism for Alternate Hardware Interface
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.