Description
The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat actor with physical access could potentially gain credentials, which could be used to alter or destroy data stored in the database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Becton, Dickinson and Company (BD) | FACSChorus | 5.0 – ≤ 5.1 | — |
Advisories 1
- ICSMA-23-331-01 BD FACSChorus CISA ICS & IT advisories · Nov 28, 2023