Unsecure Identity Verification
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-287.
Summary
The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately validating the identity of the requested resource. This is possible through the use of LLMNR, MBT-NS, or MDNS and will result in NTLMv2 hashes being sent to a malicious entity position on the local network. These hashes can subsequently be attacked through brute force and cracked if a weak password is used. This attack would only apply to domain joined systems.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Becton, Dickinson and Company (BD) | FACSChorus | 5.0 – 5.1; 3.0 – 3.1 | — | No fix listed | CNA |
- FACSChorus VendorBecton, Dickinson and Company (BD) Affected 5.0 – 5.1; 3.0 – 3.1 Fixed in — No fix listed CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:bd:facschorus:5.0:*:*:*:*:*:*:* | 5.0 | Vulnerable | Becton, Dickinson and Company (BD) |
| cpe:2.3:a:bd:facschorus:5.1:*:*:*:*:*:*:* | 5.1 | Vulnerable | Becton, Dickinson and Company (BD) |
| cpe:2.3:h:hp:hp_z2_tower_g9:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
| cpe:2.3:a:bd:facschorus:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Becton, Dickinson and Company (BD) |
| cpe:2.3:a:bd:facschorus:3.1:*:*:*:*:*:*:* | 3.1 | Vulnerable | Becton, Dickinson and Company (BD) |
| cpe:2.3:h:hp:hp_z2_tower_g5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hewlett Packard Enterprise |
- cpe:2.3:a:bd:facschorus:5.0:*:*:*:*:*:*:* Versions 5.0 Vulnerable ·Becton, Dickinson and Company (BD)
- cpe:2.3:a:bd:facschorus:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Becton, Dickinson and Company (BD)
- cpe:2.3:h:hp:hp_z2_tower_g9:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
- cpe:2.3:a:bd:facschorus:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Becton, Dickinson and Company (BD)
- cpe:2.3:a:bd:facschorus:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Becton, Dickinson and Company (BD)
- cpe:2.3:h:hp:hp_z2_tower_g5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hewlett Packard Enterprise
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-29062
- 2026-10-03 Alias added: GHSA-j4p2-5m4c-gvpm
References
More Becton, Dickinson and Company (BD) Facschorus vulnerabilities
- TI-2023-13510 Lack of USB Whitelisting CVSS 3.1MEDIUM 5.7
- TI-2023-13511 Lack of Adequate BIOS Authentication CVSS 3.1MEDIUM 5.2
- TI-2023-13515 Overly Permissive Access Policy CVSS 3.1MEDIUM 4.3
- TI-2023-13514 Hardcoded Secrets CVSS 3.1MEDIUM 4.3
- TI-2023-13516 Incorrect User Management CVSS 3.1LOW 3.5
- TI-2023-13513 Lack of DMA Access Protections CVSS 3.1LOW 2.4
Sources
- CVE-2023-29062 · CVE Program
- CVE-2023-29062 · NVD
- FIRST EPSS
- GHSA-j4p2-5m4c-gvpm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences