The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then isolate sensitive information such as a BitLocker encryption key from a dump of the workstation RAM during startup.
2023-11-28T21:15:07.613
2024-11-21T07:56:29.133
Modified
CVSSv3.1: 2.4 (LOW)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | bd | facschorus | 5.0 | Yes |
| Application | bd | facschorus | 5.1 | Yes |
| Hardware | hp | hp_z2_tower_g9 | - | No |
| Application | bd | facschorus | 3.0 | Yes |
| Application | bd | facschorus | 3.1 | Yes |
| Hardware | hp | hp_z2_tower_g5 | - | No |