HIGH🇵🇱 Wersja polska

CVE-2023-1966

CVSS 7.4v3.1pub. 2023-04-28upd. 2024-11-21

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.

CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

  • Illumina Iscan

    HW
    Illumina
    all versions

  • Illumina Iscan Firmware

    OS
    Illumina
    4.0.04.0.5

  • Illumina Iseq 100

    HW
    Illumina
    all versions

  • Illumina Iseq 100 Firmware

    OS
    Illumina
    all versions

  • Illumina Miniseq

    HW
    Illumina
    all versions

  • Illumina Miniseq Firmware

    OS
    Illumina
    ≥ 2.0

  • Illumina Miseq

    HW
    Illumina
    all versions

  • Illumina Miseqdx

    HW
    Illumina
    all versions

  • Illumina Miseqdx Firmware

    OS
    Illumina
    4.0≥ 4.0.1

  • Illumina Miseq Firmware

    OS
    Illumina
    ≥ 4.0

  • Illumina Nextseq 1000

    HW
    Illumina
    all versions

  • Illumina Nextseq 1000 Firmware

    OS
    Illumina
    1.4.1

  • Illumina Nextseq 2000

    HW
    Illumina
    all versions

  • Illumina Nextseq 2000 Firmware

    OS
    Illumina
    1.4.1

  • Illumina Nextseq 500

    HW
    Illumina
    all versions

  • Illumina Nextseq 500 Firmware

    OS
    Illumina
    4.0

  • Illumina Nextseq 550

    HW
    Illumina
    all versions

  • Illumina Nextseq 550dx

    HW
    Illumina
    all versions

  • Illumina Nextseq 550dx Firmware

    OS
    Illumina
    4.01.0.0 – 1.3.1≥ 1.3.3

  • Illumina Nextseq 550 Firmware

    OS
    Illumina
    4.0

  • Illumina Novaseq 6000

    HW
    Illumina
    all versions

  • Illumina Novaseq 6000 Firmware

    OS
    Illumina
    1.8≤ 1.7
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-1968CRITICAL10.0PL ✓same product

Illumina Universal Copy Service – nasłuch na niezabezpieczonym adresie IP

CVE-2022-1517CRITICAL10.0PL ✓same product

RCE z podwyższonymi uprawnieniami w Illumina Local Run Manager

CVE-2022-1518CRITICAL10.0PL ✓same product

Path traversal w Illumina Local Run Manager — nieautoryzowany upload plików

CVE-2022-1519CRITICAL10.0PL ✓same product

Unrestricted File Upload umożliwiający RCE w Illumina Local Run Manager

CVE-2022-1521CRITICAL9.1PL ✓same product

Brak uwierzytelniania w Illumina Local Run Manager — nieautoryzowany dostęp