PT-2023-22118
CVE-2023-29061
·
Published
2023-11-28
·
Updated
2023-12-05
Description by
CVSS 3.1
5.2
MediumMetricsAV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Name of the Vulnerable Software and Affected Versions
FACSChorus workstation (affected versions not specified)
Description
The issue concerns the lack of a BIOS password on the FACSChorus workstation. This allows a threat actor with physical access to potentially exploit the issue and access the BIOS configuration. They can then modify the drive boot order and BIOS pre-boot authentication.
Recommendations
For the FACSChorus workstation, set a BIOS password to prevent unauthorized access to the BIOS configuration and modifications to the drive boot order and BIOS pre-boot authentication.
Found an issue in the description? Have something to add? Feel free to write us 👾