low2.4
CVE-2023-29063
The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for…
Impact
The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then isolate sensitive information such as a BitLocker encryption key from a dump of the workstation RAM during startup.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bd | Facschorus | Versions 5.0, 5.1, 3.0, 3.1 |