Skip to content
CVE PROGRAM SOURCE RECORD5.2 Medium

CVE-2023-29061

Lack of Adequate BIOS Authentication

Description

There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Becton, Dickinson and Company (BD) FACSChorus

Default version status: unaffected

  • 5.0 to ≤ 5.1affected
  • 3.0 to ≤ 3.1affected

References