Vulnerability Details CVE-2023-29063
The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then isolate sensitive information such as a BitLocker encryption key from a dump of the workstation RAM during startup.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.3%
CVSS Severity
CVSS v3 Score 2.4
References
Products affected by CVE-2023-29063
-
cpe:2.3:a:bd:facschorus:3.0
-
cpe:2.3:a:bd:facschorus:3.1
-
cpe:2.3:a:bd:facschorus:5.0
-
cpe:2.3:a:bd:facschorus:5.1
-
cpe:2.3:h:hp:hp_z2_tower_g5:-
-
cpe:2.3:h:hp:hp_z2_tower_g9:-