Search/CVE-2023-1966
● CVE — High

CVE-2023-1966

VendorilluminaProductiscan firmware, iseq 100 firmware, miniseq firmware, miseq firmware, miseqdx firmware, nextseq 1000 firmware, nextseq 2000 firmware, nextseq 500 firmware, nextseq 550 firmware, nextseq 550dx firmware, novaseq 6000 firmwareDiscoveredApr 28, 2023UpdatedNov 21, 2024

Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability. An unauthenticated malicious actor could upload and execute code remotely at the operating system level, which could allow an attacker to change settings, configurations, software, or access sensitive data on the affected product.

CVSS v3.1
7.4 HIGH
EPSS
0.92%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorPHYSICAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Connections
12 relationships
Timeline
disclosure → media coverage
Apr 28, 2023
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024