CVE-2023-1966
Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.
Published:Apr 28, 2023
Last Modified:Jan 16, 2025
EPS:Apr 28, 2023
EPSS Score:0.00303
CVSS Score:7.4
Affected Products
Vendor
Product
Action
Vendor
Illumina
Product
Iscan
Illumina
Iscan
Vendor
Illumina
Product
Iscan Firmware
Illumina
Iscan Firmware
Vendor
Illumina
Product
Iseq 100
Illumina
Iseq 100
Vendor
Illumina
Product
Iseq 100 Firmware
Illumina
Iseq 100 Firmware
Vendor
Illumina
Product
Miniseq
Illumina
Miniseq
Vendor
Illumina
Product
Miniseq Firmware
Illumina
Miniseq Firmware
Vendor
Illumina
Product
Miseq
Illumina
Miseq
Vendor
Illumina
Product
Miseq Firmware
Illumina
Miseq Firmware
Vendor
Illumina
Product
Miseqdx
Illumina
Miseqdx
Vendor
Illumina
Product
Miseqdx Firmware
Illumina
Miseqdx Firmware
Vendor
Illumina
Product
Nextseq 1000
Illumina
Nextseq 1000
Vendor
Illumina
Product
Nextseq 1000 Firmware
Illumina
Nextseq 1000 Firmware
Vendor
Illumina
Product
Nextseq 2000
Illumina
Nextseq 2000
Vendor
Illumina
Product
Nextseq 2000 Firmware
Illumina
Nextseq 2000 Firmware
Vendor
Illumina
Product
Nextseq 500
Illumina
Nextseq 500
Vendor
Illumina
Product
Nextseq 500 Firmware
Illumina
Nextseq 500 Firmware
Vendor
Illumina
Product
Nextseq 550
Illumina
Nextseq 550
Vendor
Illumina
Product
Nextseq 550 Firmware
Illumina
Nextseq 550 Firmware
Vendor
Illumina
Product
Nextseq 550dx
Illumina
Nextseq 550dx
Vendor
Illumina
Product
Nextseq 550dx Firmware
Illumina
Nextseq 550dx Firmware
Vendor
Illumina
Product
Novaseq 6000
Illumina
Novaseq 6000
Vendor
Illumina
Product
Novaseq 6000 Firmware
Illumina
Novaseq 6000 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
