CRITICAL🇵🇱 Wersja polska

CVE-2023-1968

CVSS 10.0v3.1pub. 2023-04-28upd. 2024-11-21

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

  • Illumina Iscan

    HW
    Illumina
    all versions

  • Illumina Iscan Firmware

    OS
    Illumina
    4.0.04.0.5

  • Illumina Iseq 100

    HW
    Illumina
    all versions

  • Illumina Iseq 100 Firmware

    OS
    Illumina
    all versions

  • Illumina Miniseq

    HW
    Illumina
    all versions

  • Illumina Miniseq Firmware

    OS
    Illumina
    ≥ 2.0

  • Illumina Miseq

    HW
    Illumina
    all versions

  • Illumina Miseqdx

    HW
    Illumina
    all versions

  • Illumina Miseqdx Firmware

    OS
    Illumina
    4.0≥ 4.0.1

  • Illumina Miseq Firmware

    OS
    Illumina
    ≥ 4.0

  • Illumina Nextseq 1000

    HW
    Illumina
    all versions

  • Illumina Nextseq 1000 Firmware

    OS
    Illumina
    1.4.1

  • Illumina Nextseq 2000

    HW
    Illumina
    all versions

  • Illumina Nextseq 2000 Firmware

    OS
    Illumina
    1.4.1

  • Illumina Nextseq 500

    HW
    Illumina
    all versions

  • Illumina Nextseq 500 Firmware

    OS
    Illumina
    4.0

  • Illumina Nextseq 550

    HW
    Illumina
    all versions

  • Illumina Nextseq 550dx

    HW
    Illumina
    all versions

  • Illumina Nextseq 550dx Firmware

    OS
    Illumina
    4.01.0.0 – 1.3.1≥ 1.3.3

  • Illumina Nextseq 550 Firmware

    OS
    Illumina
    4.0

  • Illumina Novaseq 6000

    HW
    Illumina
    all versions

  • Illumina Novaseq 6000 Firmware

    OS
    Illumina
    1.8≤ 1.7
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-1517CRITICAL10.0PL ✓same product

RCE z podwyższonymi uprawnieniami w Illumina Local Run Manager

CVE-2022-1518CRITICAL10.0PL ✓same product

Path traversal w Illumina Local Run Manager — nieautoryzowany upload plików

CVE-2022-1519CRITICAL10.0PL ✓same product

Unrestricted File Upload umożliwiający RCE w Illumina Local Run Manager

CVE-2022-1521CRITICAL9.1PL ✓same product

Brak uwierzytelniania w Illumina Local Run Manager — nieautoryzowany dostęp

CVE-2023-1966HIGH7.4same product

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability...