CVE-2026-17583

Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check

State
Published
Severity
8.3 High
Published
Aug 5, 2026
Updated
Aug 6, 2026
Reserved
Jul 27, 2026

Read the record on cve.org

Description

The affected

Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.

Scores

CVSSScoreVectorSource
4.08.3 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:Nicscert
3.18.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hicscert

Weaknesses

Affected Products

ProductVersions
Applied Biosystems 3500/3500xL Series Data Collection SoftwareThermo Fisher
  • 4.0.2 and earlierAffected
Applied Biosystems 3730/3730xL Series Data Collection SoftwareThermo Fisher
  • 5.0.2 and earlierAffected
Applied Biosystems SeqStudio Genetic Analyzer Data Collection SoftwareThermo Fisher
  • 1.2.5 and earlierAffected
Applied Biosystems SeqStudio Flex Series Instrument SoftwareThermo Fisher
  • 1.2.0 and earlierAffected
Applied Biosystems GeneMapper ID-X SoftwareThermo Fisher
  • 1.7.3 and earlierAffected
Applied Biosystems 3130 Series Data Collection SoftwareThermo Fisher
  • 4.1 and earlierAffected
ABI PRISM 3100/3100-Avant Data Collection SoftwareThermo Fisher
  • 2.0 and earlierAffected
ABI PRISM 310 Data Collection SoftwareThermo Fisher
  • 3.1 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.