Description
The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets used by the application, which include tokens and passwords for administrative accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Becton, Dickinson and Company (BD) | FACSChorus | 5.0 – ≤ 5.1 | — |
Advisories 1
- ICSMA-23-331-01 BD FACSChorus CISA ICS & IT advisories · Nov 28, 2023