Illumina

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Illumina records in CISA KEV

No Illumina vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Local Run Manager 5 records MEDIUM Iscan Firmware 2 records MEDIUM Iseq 100 Firmware 2 records MEDIUM Miniseq Firmware 2 records MEDIUM Miseq Firmware 2 records MEDIUM Miseqdx Firmware 2 records MEDIUM Nextseq 1000 Firmware 2 records MEDIUM Nextseq 2000 Firmware 2 records MEDIUM

Records

7 records

TI-2023-01851 CVE-2023-1968 · GHSA-cpwh-2ghx-4jvr

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an…

MEDIUM 52

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01812 Published 2023-04-28 No fix listed CWE-1327

TI-2022-01392 CVE-2022-1519 · GHSA-4pg3-x42q-599h

Unrestricted file upload in Illumina NextSeq 550Dx

MEDIUM 52

LRM does not restrict the types of files that can be uploaded to the affected product.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01403 Published 2022-06-24 No fix listed CWE-434

TI-2022-01391 CVE-2022-1518 · GHSA-gf32-9r48-vxjm

3.2.2 IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22

MEDIUM 52

LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01669 Published 2022-06-24 No fix listed CWE-22

TI-2022-01390 CVE-2022-1517 · GHSA-xwwx-p8gv-wf69

3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250

MEDIUM 52

LRM utilizes elevated privileges.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01822 Published 2022-06-24 No fix listed CWE-250

TI-2022-01394 CVE-2022-1521 · GHSA-hgpf-hf44-725p

3.2.4 IMPROPER ACCESS CONTROL CWE-284

MEDIUM 50

LRM does not implement authentication or authorization by default.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01143 Published 2022-06-24 No fix listed CWE-284

TI-2023-01849 CVE-2023-1966 · GHSA-v566-5q2w-h94w

Improper privilege management in Illumina iScan Control Software

MEDIUM 45

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00916 Published 2023-04-28 No fix listed CWE-250

TI-2022-01397 CVE-2022-1524 · GHSA-qqpc-gc88-ff86

3.2.5 CLEARTEXT TRANSMISSION OF SENSITIVE INFORMATION CWE-319

LOW 34

LRM version 2.4 and lower does not implement TLS encryption.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00324 Published 2022-06-24 No fix listed CWE-319

Open these records in search →

Critical	6
High	1
Medium	0
Low	0
No CVSS	0