CVE-2023-29065 | BDVDB-2026-217838 Detail
Becton, Dickinson and Company (BD)FACSChorus
Description#
The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat actor with physical access could potentially gain credentials, which could be used to alter or destroy data stored in the database.
Impact#
CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs
Weaknesses#
- CWE-277 Insecure Inherited Permissions
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.