Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3fjc-956c-32mf

Опубликовано: 28 нояб. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 2.4

Описание

The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then isolate sensitive information such as a BitLocker encryption key from a dump of the workstation RAM during startup.

The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then isolate sensitive information such as a BitLocker encryption key from a dump of the workstation RAM during startup.

EPSS

Процентиль: 23%
0.00075
Низкий

2.4 Low

CVSS3

Дефекты

CWE-1299
CWE-306

Связанные уязвимости

CVSS3: 2.4
nvd
около 2 лет назад

The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then isolate sensitive information such as a BitLocker encryption key from a dump of the workstation RAM during startup.

EPSS

Процентиль: 23%
0.00075
Низкий

2.4 Low

CVSS3

Дефекты

CWE-1299
CWE-306