HIGH🇵🇱 Wersja polska

CVE-2026-17583

CVSS 8.3v4.0pub. 2026-08-05upd. 2026-08-26

The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.

CVSS Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • Thermofisher Abi Prism 3100\/3100 Avant Data Collection Software

    APP
    Thermofisher
    ≤ 2.0
  • Thermofisher Abi Prism 310 Data Collection Software

    APP
    Thermofisher
    ≤ 3.1
  • Thermofisher Applied Biosystems 3130 Series Data Collection Software

    APP
    Thermofisher
    ≤ 4.1
  • Thermofisher Applied Biosystems 3500\/3500xl Series Data Collection Software

    APP
    Thermofisher
    < 4.0.3
  • Thermofisher Applied Biosystems 3730\/3730xl Series Data Collection Software

    APP
    Thermofisher
    < 5.0.3
  • Thermofisher Applied Biosystems Seqstudio Flex Series Instrument Software

    APP
    Thermofisher
    < 1.2.1
  • Thermofisher Applied Biosystems Seqstudio Genetic Analyzer Data Collection Software

    APP
    Thermofisher
    < 1.2.6
  • Thermofisher Genemapper Id X

    APP
    Thermofisher
    < 1.7.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-54304CRITICAL9.8PL ✓same vendor

Niezabezpieczony serwer X11 w Thermo Fisher Ion Torrent OneTouch 2 umożliwia RCE z uprawnieniami root

CVE-2025-53963CRITICAL9.8PL ✓same vendor

Słabe domyślne hasło root w urządzeniu Thermo Fisher Ion Torrent OneTouch 2

CVE-2025-54303CRITICAL9.8PL ✓same vendor

Domyślne słabe poświadczenia w Thermo Fisher Torrent Suite Software

CVE-2017-11349CRITICAL9.8PL ✓same vendor

Nieautoryzowane komponowanie programów i harmonogramów w dataTaker DT8x

CVE-2017-11165CRITICAL9.8PL ✓same vendor

Ujawnienie konfiguracji i danych uwierzytelniających w dataTaker DT80 dEX