Description
There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to access the BIOS configuration and modify the drive boot order and BIOS pre-boot authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Becton, Dickinson and Company (BD) | FACSChorus | 5.0 – ≤ 5.1, 3.0 – ≤ 3.1 | — |
Advisories 1
- ICSMA-23-331-01 BD FACSChorus CISA ICS & IT advisories · Nov 28, 2023