Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Illumina records in CISA KEVNo Illumina vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 52
LRM does not restrict the types of files that can be uploaded to the affected product.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01403 · Published 2022-06-24 · No fix listed CWE-434
Priority MEDIUM 52
LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01669 · Published 2022-06-24 · No fix listed CWE-22
Priority MEDIUM 52
LRM utilizes elevated privileges.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01822 · Published 2022-06-24 · No fix listed CWE-250
Priority MEDIUM 50
LRM does not implement authentication or authorization by default.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01143 · Published 2022-06-24 · No fix listed CWE-284
Priority LOW 34
LRM version 2.4 and lower does not implement TLS encryption.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00324 · Published 2022-06-24 · No fix listed CWE-319
Open these records in search →