CVE-2023-1968

State: Published
Severity: 10.0 Critical
Published: Apr 28, 2023
Updated: Jan 16, 2025
Reserved: Apr 10, 2023

Description

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.

Scores

CVSS	Score	Vector	Source
3.1	10.0 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	icscert

Weaknesses

CWE-1327 Binding to an Unrestricted IP Address

Affected Products

Product	Versions
iScan Control SoftwareIllumina	4.0.0Affected 4.0.5Affected
MiniSeq Control SoftwareIllumina	2.0 Affected
iSeq 100Illumina	All versionsAffected
MiSeq Control SoftwareIllumina	4.0 (RUO Mode)Affected
MiSeqDx Operating SoftwareIllumina	4.0.1 Affected
NextSeq 500/550 Control SoftwareIllumina	4.0Affected
NextSeq 550Dx Control SoftwareIllumina	4.0 (RUO Mode)Affected
NextSeq 550Dx Operating SoftwareIllumina	1.0.0 through 1.3.1Affected 1.3.3 Affected
NextSeq 1000/2000 Control SoftwareIllumina	1.4.1 and earlierAffected
NovaSeq 6000 Control SoftwareIllumina	1.7 and earlierAffected
NovaSeq Control SoftwareIllumina	1.8Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.