CVEvulnerability

CVE-2023-1968

7.5 HIGH Published 2023-04-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-04-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-1327

Description

Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.

Affected configurations

• illumina iscan firmware 4.0.0 • illumina iscan firmware 4.0.5 • illumina iseq 100 firmware • illumina miniseq firmware (>= 2.0) • illumina miseq firmware (>= 4.0) • illumina miseqdx firmware (>= 4.0.1) • illumina miseqdx firmware 4.0 • illumina nextseq 500 firmware 4.0 • illumina nextseq 550 firmware 4.0 • illumina nextseq 550dx firmware (>= 1.0.0 <= 1.3.1) • illumina nextseq 550dx firmware (>= 1.3.3) • illumina nextseq 550dx firmware 4.0 • illumina nextseq 1000 firmware 1.4.1 • illumina nextseq 2000 firmware 1.4.1 • illumina novaseq 6000 firmware (<= 1.7) • illumina novaseq 6000 firmware 1.8

Related

Weakness · CWE (1)

  • CWE-1327 Binding to an Unrestricted IP Address weakness

References