CVE-2023-29063 — Lack of DMA Access Protections
The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A…
Published: 2023-11-28 · CVSS: 2.4 · CVSS 3.1
The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture. A threat actor can then isolate sensitive information such as a BitLocker encryption key from a dump of the workstation RAM during startup.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7