Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-29060 EUVD-2023-32663GHSA-q8hh-f4g3-p688

Lack of USB Whitelisting

Published Nov 28, 2023 · Updated Jun 3, 2025 · Assigned by BD

Description

The FACSChorus workstation operating system does not restrict what devices can interact with its USB ports. If exploited, a threat actor with physical access to the workstation could gain access to system information and potentially exfiltrate data.

Affected products

VendorProductAffectedFixed
Becton, Dickinson and Company (BD) FACSChorus 5.0 – ≤ 5.1, 3.0 – ≤ 3.1 —

Advisories 1

References