CVE-2023-1966

State: Published
Severity: 7.4 High
Published: Apr 28, 2023
Updated: Jan 16, 2025
Reserved: Apr 10, 2023

Description

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.

Scores

CVSS	Score	Vector	Source
3.1	7.4 High	CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	icscert

Weaknesses

CWE-250 Execution with Unnecessary Privileges

Affected Products

Product	Versions
iScan Control SoftwareIllumina	4.0.0Affected 4.0.5Affected
MiniSeq Control SoftwareIllumina	2.0 Affected
iSeq 100Illumina	All versionsAffected
MiSeq Control SoftwareIllumina	4.0 (RUO Mode)Affected
MiSeqDx Operating SoftwareIllumina	4.0.1 Affected
NextSeq 500/550 Control SoftwareIllumina	4.0Affected
NextSeq 550Dx Control SoftwareIllumina	4.0 (RUO Mode)Affected
NextSeq 550Dx Operating SoftwareIllumina	1.0.0 through 1.3.1Affected 1.3.3 Affected
NextSeq 1000/2000 Control SoftwareIllumina	1.4.1 and earlierAffected
NovaSeq 6000 Control SoftwareIllumina	1.7 and earlierAffected
NovaSeq Control SoftwareIllumina	1.8Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.