CRITICAL🇵🇱 Wersja polska

CVE-2022-1517

CVSS 10.0v3.1pub. 2022-06-24upd. 2024-11-21

LRM utilizes elevated privileges. An unauthenticated malicious actor can upload and execute code remotely at the operating system level, which can allow an attacker to change settings, configurations, software, or access sensitive data on the affected produc. An attacker could also exploit this vulnerability to access APIs not intended for general use and interact through the network.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Illumina Iseq 100

    HW
    Illumina
    all versions

  • Illumina Local Run Manager

    APP
    Illumina
    1.3 – 3.1

  • Illumina Miniseq

    HW
    Illumina
    all versions

  • Illumina Miseq

    HW
    Illumina
    all versions

  • Illumina Miseq Dx

    HW
    Illumina
    all versions

  • Illumina Nextseq 500

    HW
    Illumina
    all versions

  • Illumina Nextseq 550

    HW
    Illumina
    all versions

  • Illumina Nextseq 550dx

    HW
    Illumina
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-1968CRITICAL10.0PL ✓same product

Illumina Universal Copy Service – nasłuch na niezabezpieczonym adresie IP

CVE-2022-1518CRITICAL10.0PL ✓same product

Path traversal w Illumina Local Run Manager — nieautoryzowany upload plików

CVE-2022-1519CRITICAL10.0PL ✓same product

Unrestricted File Upload umożliwiający RCE w Illumina Local Run Manager

CVE-2022-1521CRITICAL9.1PL ✓same product

Brak uwierzytelniania w Illumina Local Run Manager — nieautoryzowany dostęp

CVE-2023-1966HIGH7.4same product

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability...