CVE-2023-29063
CVSS 3.1 Score 2.4 of 10 (low)
Details
Summary
CVE-2023-29063 is a vulnerability affecting the FACSChorus workstation, specifically its PCI express (PCIe) slots. The vulnerability allows physical access to these slots, enabling a threat actor to insert a PCI card designed for memory capture. By doing so, the threat actor can potentially extract sensitive information such as a BitLocker encryption key from a dump of the workstation's RAM during startup. The vulnerability has a risk score of 10 and is categorized as having low base severity. It does not require any privileges or user interaction to exploit and has a low attack complexity. The confidentiality impact is rated as low, while the availability impact is none. Remediation steps are not provided in the available information.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions