Illumina Vulnerabilities and Affected Products
Vulnerabilities associated with NovaSeq 6000 Control Software.
Products
Clear product- iSeq 100 Instrument5 vulnerabilities
- MiniSeq Instrument5 vulnerabilities
- MiSeq Dx5 vulnerabilities
- MiSeq Instrument5 vulnerabilities
- NextSeq 550 Instrument5 vulnerabilities
- NextSeq 550Dx5 vulnerabilities
- NextSeq 500 Instrument4 vulnerabilities
- iScan Control Software2 vulnerabilities
- iSeq 1002 vulnerabilities
- MiniSeq Control Software2 vulnerabilities
- MiSeq Control Software2 vulnerabilities
- MiSeqDx Operating Software2 vulnerabilities
- NextSeq 1000/2000 Control Software2 vulnerabilities
- NextSeq 500/550 Control Software2 vulnerabilities
- NextSeq 550Dx Control Software2 vulnerabilities
- NextSeq 550Dx Operating Software2 vulnerabilities
- NovaSeq 6000 Control Software2 vulnerabilities
- NovaSeq Control Software2 vulnerabilities
- NextSeq 500 Instrumen1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-1968CRITICAL | CVE-2023-1968Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications. CWE-1327Apr 28, 2023 | CVSS10.0v3.1 | EPSS1.81% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-1966HIGH | CVE-2023-1966Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product. | CVSS7.4v3.1 | EPSS0.916% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |