What is CVE-2023-29062?

CVE-2023-29062 is a low-severity vulnerability in Bd Facschorus, classified under Improper Authentication. CVSS score: 3.8/10. Published 2023-11-28.

How severe is CVE-2023-29062?

Low severity. CVSS v3 base score is 3.8 out of 10.

Auth bypass in Bd Facschorus

CVE-2023-29062

The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately validating the identity of the requested resource. This is possible through the use…

Vulnerability class: Broken Authentication

EPSS: 0.003 (21.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.8 (Low). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N.

Affected products

Bd Facschorus — versions 5.0, 5.1, 3.0
Becton, Dickinson And Company (Bd) Facschorus — versions 5.0, 3.0
Hp Hp_z2_tower_g5
Hp Hp_z2_tower_g9

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cybersecurity@bd.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-29062?: CVE-2023-29062 is a low-severity vulnerability in Bd Facschorus, classified under Improper Authentication. CVSS score: 3.8/10. Published 2023-11-28.
How severe is CVE-2023-29062?: Low severity. CVSS v3 base score is 3.8 out of 10.