CVE-2023-29063: Lack of DMA Access Protections
The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then isolate sensitive information such as a BitLocker encryption key from a dump of the workstation RAM during startup.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-29063?
CVE-2023-29063 is a vulnerability that allows a threat actor to insert a PCI card designed for memory capture into the FACSChorus workstation.
How does CVE-2023-29063 affect the FACSChorus workstation?
CVE-2023-29063 allows a threat actor to insert a PCI card designed for memory capture into the FACSChorus workstation and isolate sensitive information from a dump of the workstation RAM.
What is the severity of CVE-2023-29063?
CVE-2023-29063 has a severity score of 2.4, which is considered low.
How can I fix CVE-2023-29063?
To fix CVE-2023-29063, physical access to the PCI express (PCIe) slots of the FACSChorus workstation should be restricted to prevent the insertion of unauthorized PCI cards.
Is Hp Hp Z2 Tower G9 affected by CVE-2023-29063?
No, Hp Hp Z2 Tower G9 is not affected by CVE-2023-29063.