Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Becton, Dickinson and Company (BD) Component: Facschorus Clear all filters
TI-2023-13516 CVE-2023-29066 · GHSA-42p3-688q-33p6

Incorrect User Management

Priority LOW 16

The FACSChorus software does not properly assign data access privileges for operating system user accounts.

CVSS 3.1LOW 3.5 Physical No auth No interaction EPSS 0.00271 Published 2023-11-28 No fix listed CWE-266
TI-2023-13515 CVE-2023-29065 · GHSA-3gxr-jgff-j84x

Overly Permissive Access Policy

Priority LOW 20

The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user.

CVSS 3.1MEDIUM 4.3 Physical No auth No interaction EPSS 0.00274 Published 2023-11-28 No fix listed CWE-277
TI-2023-13514 CVE-2023-29064 · GHSA-5xgp-vqrr-cm5v

Hardcoded Secrets

Priority LOW 20

The FACSChorus software contains sensitive information stored in plaintext.

CVSS 3.1MEDIUM 4.3 Physical No auth No interaction EPSS 0.00274 Published 2023-11-28 No fix listed CWE-798
TI-2023-13513 CVE-2023-29063 · GHSA-3fjc-956c-32mf

Lack of DMA Access Protections

Priority LOW 14

The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.0018 Published 2023-11-28 No fix listed CWE-1299
TI-2023-13512 CVE-2023-29062 · GHSA-j4p2-5m4c-gvpm

Unsecure Identity Verification

Priority LOW 18

The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately validating the identity of the requested resource.

CVSS 3.1LOW 3.8 Adjacent network No auth User interaction EPSS 0.00297 Published 2023-11-28 No fix listed CWE-287
TI-2023-13511 CVE-2023-29061 · GHSA-5mf3-992w-8xcp

Lack of Adequate BIOS Authentication

Priority LOW 24

There is no BIOS password on the FACSChorus workstation.

CVSS 3.1MEDIUM 5.2 Physical No auth No interaction EPSS 0.00378 Published 2023-11-28 No fix listed CWE-306
TI-2023-13510 CVE-2023-29060 · GHSA-q8hh-f4g3-p688

Lack of USB Whitelisting

Priority LOW 25

The FACSChorus workstation operating system does not restrict what devices can interact with its USB ports.

CVSS 3.1MEDIUM 5.7 Physical No auth No interaction EPSS 0.003 Published 2023-11-28 No fix listed CWE-1299