A vulnerability was found in BD FACSChorus up to 3.1/5.1. It has been rated as problematic. This issue affects some unknown processing of the component USB Port Handler. The manipulation with an unknown input leads to a missing protection mechanism for alternate hardware interface vulnerability. Using CWE to declare the problem leads to CWE-1299. The lack of protections on alternate paths to access control-protected assets (such as unprotected shadow registers and other external facing unguarded interfaces) allows an attacker to bypass existing protections to the asset that are only performed against the primary path. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

The FACSChorusâ„¢ workstation operating system does not restrict what devices can interact with its USB ports. If exploited, a threat actor with physical access to the workstation could gain access to system information and potentially exfiltrate data.

The weakness was shared 11/29/2023. The advisory is shared at bd.com. The identification of this vulnerability is CVE-2023-29060 since 03/30/2023. Neither technical details nor an exploit are publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• BD

Name

• FACSChorus

Version

• 3.0
• 3.1
• 5.0
• 5.1

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion